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1. Overview 

Exchange uses the Extensible Storage Engine (ESE) Database File (EDB) format to store its 

tables. Exchange stores its data in files named: 

privl . edb 

privl . stm 

publ . edb 

publ . stm 


For more information about EDB see [LIBESEDB09]. 

Exchange: 

• privl.edb (ESE database file) 

• privl. stm (ESE stream file) 

The database schema of Exchange is also referred to as the MAPI database (MDB). 

ESE seems to stf^^j^^l 1 e is. n 

the database file? Perhaps by using callbacks? 


1.1. Test version 

Th e following versi on of programs were used to test the information within this document: 

• Exchange 2003 

• Exchange 2007 


2. Column names 

The column names consist of 2 parts: 

• the MAPI value type consisting of letter based definition 

• the MAPI entry type consisting of a hexadecimal string without leading 0 values 

For example the column name: S1000 refers to MAPI entry type 0x1000 of type string (MAPI 
value type OxOOle or OxOOlf) which is the plain text message body (PidTagBody). 


2.1. Value type 


Letters 

Description 

MAPI property data type 

Value type 

B 

Boolean 

PtypBoolean 

Boolean 

B 

Boolean 

PtypBoolean 

Integer 8-bit unsigned 

F 

Binary data 

PtypBinary 

Super large value 

G 

GUID 

PtypGuid 

GUID 

I 

Integer 

Ptyplntegerl6 

Integer 16-bit signed 

J 

Binary data 

PtypBinary 

Large binary data 

L 

Long integer 

Ptyplnteger32 

Integer 32-bit signed 

L 

Long integer 

Ptyplnteger32 

Binary data 
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Letters 

Description 

MAPI property data type 

Value type 




Contains a 32-bit signed little- 
endian integer 

MG 

Unknown 

Unknown 

Binary data 


uses the ESEDB mutli value? 

MN 

Array of 

Binary data 
values 

PtypMultipleBinary 

Large binary data 

MQ 

Array of quad 
integer values 

PtypMultipleInteger64 

Binary data 

MS 

Array of string 
values 

PtypMultipleStringS 

PtypMultipleString 

uses the ESEDB mutli value? 

Text 

N 

Binary data 

PtypBinary 

Binary data 

N 

Binary data 

PtypBinary 

Large binary data 

Q 

Quad integer 

Ptyplnteger64 

Binary data 

Contains a 64-bit signed little- 
endian integer 

Q 

Quad integer 

Ptyplnteger64 

Currency (64-bit) 

Contains a 64-bit signed little- 
endian integer 

s 

String 

PtypString8 

Ptyp String 

Text 

T 

Time 

PtypTime 

Currency (64-bit) 

Contains a little-endian 

Filetime 

V 

ISBitlfl 


Large binary data 


Note that PtypMultipleBinary uses the ESEDB mutli value container, not the MAPI mutli value 
container. 


3. Tables 


3.1. Folders 

The Folders table contains information about the folders. 


3.1.1. Exchange 2003 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

T3fd6 

N_TIME 

Currency (64-bit) 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

2 

I67c4 


Integer 16-bit signed 

3 

B3fe4 

s 

Boolean 

4 

L3601 

PidTagFolderType 

Integer 32-bit signed 

5 

L3602 

PidT agContentC ount 

Integer 32-bit signed 

6 

L3603 

PidTagContentUnreadCount 

Integer 32-bit signed 

7 

L6638 

M—IdM 

NT 

Integer 32-bit signed 

8 

L663e 

PR_HIERARCHY_CHANG 

E_NUM 

Integer 32-bit signed 

9 

L6780 


Integer 32-bit signed 

10 

L6782 


Integer 32-bit signed 

11 

L3617 

PidTagAssociatedContentCo 

unt 

Integer 32-bit signed 

12 

L66ad 

PR_NORMAL_MSG_W_A 

TTACH_COUNT 

Integer 32-bit signed 

13 

L66ae 

PR_ASSOC_MSG_W_ATT 

ACH_COUNT 

Integer 32-bit signed 

14 

L66af 

PR_RECIPIENT_ON_NOR 

MAL_MSG_COUNT 

Integer 32-bit signed 

15 

L66b0 

PR_RECIPIENT_ON_ASSO 

C_MSG_COUNT 

Integer 32-bit signed 

16 

L66bl 

L_MSG_COUNT 

Integer 32-bit signed 

17 

L66b2 

_M S G_C OUNT 

Integer 32-bit signed 

18 

L6750 


Integer 32-bit signed 

19 

L6751 

pr:_articiIeKnijmt.neXt 

Integer 32-bit signed 

20 

Q66b3 

PR_N ORM AL_ME S S AGE_ 
SIZE_EXTENDED 

Currency (64-bit) 

21 

Q66b4 

PR_ASSOC_MESSAGE_SI 

ZE_EXTENDED 

Currency (64-bit) 

22 

Qe08 

PidTagMessageSizeExtended 

Currency (64-bit) 

23 

B3fe5 

PR SECURE ORIGINATIO 
N 

Boolean 

24 

B67aa 

1^—1 

Boolean 

25 

B663a 


Boolean 

26 

Le23 

PidTaglnternetArticleNumbe 

r 

Integer 32-bit signed 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

27 

T3007 

PidT agCreationT ime 

Currency (64-bit) 

28 

T3008 

PidTagLastModificationTim 

e 

Currency (64-bit) 

29 

I679f 


Integer 16-bit signed 

30 

B679a 


Boolean 

31 

L3fe7 

PidTagResolveMethod 

Integer 32-bit signed 

32 

B679b 


Boolean 

33 

B67f4 


Boolean 

34 

I3f90 


Integer 16-bit signed 

35 

B10f4 

PidT ag AttributeHidden 

Boolean 

36 

B10f5 

PidTagAttributeSystem 

Boolean 

37 

B10f6 

PidTagAttributeReadOnly 

Boolean 

38 

T6709 

IMiMMSWMi 

E 

Currency (64-bit) 

39 

T670a 

E_MAX 

Currency (64-bit) 

40 

L670b 

PR DELETED COUNT TO 
TAL 

Integer 32-bit signed 

41 

Be62 

Mir- 

ET 

Boolean 

128 

Q6748 

PR_FID 

Binary data 

Folder identifier 


129 

Q6749 

PR_PARENT_FID 

Binary data 



Parent folder identifier 

64-bit integer big-endian 

130 

Q6764 

fPfnlhox MMHriail 

Binary data 

ybit:inil^;r'big-.SM 

131 

S67ec 

Some kind of query string? 

Binary data 

132 

Q67a4 

Some kind of identifier? 

Binary data 




64-bit integer big-endian 

133 

Q6791 

Some kind of identifier? 

Binary data 





134 

L67ed 


Binary data 

135 

L67ef 


Binary data 

136 

L67fl 

PidTagLtpParentNid 

Binary data 

137 

L67f3 

PidT agLtpRo w V er 

Binary data 

138 

N3880 

PR_SYNCEVENT_SUPPRE 

SS_GUID 

Binary data 

256 

Ne27 

ptagNTSD 

Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

257 

N3d21 

ptagAdminNTSD 

Large binary data 

258 

N3fe0 


Large binary data 

259 

T668f 

— FT.F.TFD Pi 

Currency (64-bit) 

260 

N677e 


Large binary data 

261 

S3001 

PidT agDisplayN ame 

Large text 

262 

S3fe8 

PR_ADDRESS_BOOK_DIS 

PLAY_NAME 

Large text 

263 

S679c 


Large text 

264 

S3004 

PidTagComment 

Large text 

265 

N677f 


Large binary data 

266 

N67ff 


Large binary data 

267 

N6781 


Large binary data 

268 

L67dc 


Integer 32-bit signed 

269 

L6783 

— e 

Integer 32-bit signed 

270 

L67dd 


Integer 32-bit signed 

271 

N6784 


Large binary data 

272 

L6788 


Integer 32-bit signed 

273 

L6799 


Integer 32-bit signed 

274 

N67ce 


Binary data 

275 

N678b 


Large binary data 

276 

N678c 


Large binary data 

277 

N6785 


Large binary data 

278 

N6712 


Large binary data 

279 

N6786 


Large binary data 

280 

N6787 


Large binary data 

281 

N678a 


Large binary data 

282 

Te66 

piiiiiapa— 

Currency (64-bit) 

283 

N678f 


Large binary data 

284 

N6790 


Large binary data 

285 

N3ffe 

PR_EXTENDED_ACL_DA 

TA 

Large binary data 

286 

MQ67a6 


Binary data 

287 

N67a5 


Large binary data 

288 

N65e0 


Large binary data 

289 

N65e2 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

290 

N65e3 


Large binary data 

291 

I67a0 


Integer 16-bit signed 

292 

N6792 


Large binary data 

293 

N6798 


Large binary data 

294 

N67d9 


Binary data 

295 

N6796 


Large binary data 

296 

N67da 


Large binary data 

297 

T679e 


Currency (64-bit) 

298 

L679d 


Integer 32-bit signed 

299 

N3fel 


Large binary data 

300 

L6760 


Integer 32-bit signed 

301 

T6642 


Currency (64-bit) 

302 

L6640 


Integer 32-bit signed 

303 

L6643 


Integer 32-bit signed 

304 

L6641 


Integer 32-bit signed 

305 

Q669b 


Currency (64-bit) 

306 

Q669c 


Currency (64-bit) 

307 

Q669d 


Currency (64-bit) 

308 

N67ec 


Large binary data 

309 

N67ee 


Large binary data 

310 

N67f0 


Large binary data 

311 

N67f2 


Large binary data 

312 

S6707 


Large text 

313 

L6808 


Integer 32-bit signed 

314 

Q674a 


Binary data 

315 

B66c5 


Boolean 

316 

Ne59 


Binary data 

317 

Ne58 


Binary data 

318 

MN667f 


Large binary data 

319 

Le63 


Integer 32-bit signed 

320 

Le64 


Integer 32-bit signed 

321 

Le67 


Integer 32-bit signed 

322 

Ne96 


Binary data 

323 

B3fe6 


Boolean 

324 

MS800d 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

325 

MS800e 


Large text 

326 

S800f 


Large text 

327 

S3613 


Large text 

328 

N36d0 

PidTaglpmAppointmentEntr 

yld 

Large binary data 

Contains an entry identifier 

329 

N36dl 

PidTaglpmContactEntryld 

Large binary data 

Contains an entry identifier 

330 

N36d7 

PidTaglpmDraftsEntryld 

Large binary data 

Contains an entry identifier 

331 

N36d2 

PidTaglpm J ournalEntry Id 

Large binary data 

Contains an entry identifier 

332 

N36d3 

PidT aglpmN oteEntryld 

Large binary data 

Contains an entry identifier 

333 

N36d4 

PidT aglpmT askEntry Id 

Large binary data 

Contains an entry identifier 

334 

T6685 

ffiis— aaf 

Currency (64-bit) 

Contains a little-endian 

Filetime 

335 

N7c04 


Large binary data 

336 

N36da 


Large binary data 

337 

L36de 


Integer 32-bit signed 

338 

MN36d8 

PR_ADDITIONAL_REN_E 

NTRYIDS 

Large binary data 

Contains an array of entry 
identifier values 

339 

MN36e4 

PidTagF reeBusyEntry Ids 

Large binary data 

Contains an array of entry 
identifier values 

340 

N36eb 


Large binary data 

341 

S815d 


Large text 

342 

B815e 


Boolean 

343 

MS8168 


Large text 

344 

N36e0 

PR FOLDER XVIEWINFO 
_ENTRYID 

Large binary data 

Contains an entry identifier 

345 

N36df 


Large binary data 

346 

N7d02 


Large binary data 

347 

L36e2 


Integer 32-bit signed 

348 

N3616 


Large binary data 

349 

S8154 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

350 

S8155 


Large text 

351 

S8156 


Large text 

352 

S8157 


Large text 

353 

L8158 


Integer 32-bit signed 

354 

L8159 


Integer 32-bit signed 

355 

L815a 


Integer 32-bit signed 

356 

L815b 


Integer 32-bit signed 

357 

B815c 


Boolean 

358 

L8169 


Integer 32-bit signed 

359 

L816a 


Integer 32-bit signed 

360 

L816b 


Integer 32-bit signed 

361 

L816c 


Integer 32-bit signed 

362 

L816d 


Integer 32-bit signed 

363 

S816e 


Large text 

364 

B816f 


Boolean 

365 

B8170 


Boolean 

366 

B8171 


Boolean 

367 

B8172 


Boolean 

368 

B8173 


Boolean 

369 

S8174 


Large text 

370 

L8175 


Integer 32-bit signed 

371 

S8176 


Large text 

372 

L8177 


Integer 32-bit signed 

373 

B8160 


Boolean 

374 

S8161 


Large text 

375 

S8162 


Large text 

376 

B8163 


Boolean 

377 

B8178 


Boolean 

378 

L8179 


Integer 32-bit signed 

379 

L817a 


Integer 32-bit signed 

380 

L817b 


Integer 32-bit signed 

381 

L817c 


Integer 32-bit signed 

382 

L817d 


Integer 32-bit signed 

383 

L8167 


Integer 32-bit signed 

384 

T36db 


Currency (64-bit) 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

385 

N36d5 

pR_REMiNDEimiiiBin 

_ENTRYID 

Large binary data 

386 

L8164 


Integer 32-bit signed 

387 

S8003 


Large text 

388 

S803c 


Large text 

389 

S84da 


Large text 

18111864 encoded? 

390 

L8165 


Integer 32-bit signed 

391 

B815f 


Boolean 

392 

L8166 


Integer 32-bit signed 

393 

N36dc 


Large binary data 

Contains an entry identifier 


Service provider identifier in N36d0 - N36d7 entry identifiers is linked to N676c in Mailbox table? 

A Folder identifier Q6748 (PR_FID) of 0xl00000000003bf4 relates to table 1-3BF4. This table 
contains a view (summary) of the contents of the folder. 


3.1.2. Exchange 2007 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

T3fd6 

N_TIME 

Currency (64-bit) 

Contains a little-endian 

Filetime 

2 

I67c4 


Integer 16-bit signed 

3 

B3fe4 

paBMHlM— MM 
s 

Boolean 

4 

B6697 

IMMUeH EM 

Integer 8-bit unsigned 

5 

L3601 

PidTagFolderType 

Integer 32-bit signed 

6 

L3602 

PidT agContentC ount 

Integer 32-bit signed 

7 

L3603 

PidTagContentUnreadCount 

Integer 32-bit signed 

8 

L6638 

NT 

Integer 32-bit signed 

9 

L663e 

PR HIERARCHY CHANG 
E_NUM 

Integer 32-bit signed 

10 

L6780 


Integer 32-bit signed 

11 

L6782 


Integer 32-bit signed 

12 

L3617 

PidTagAssociatedContentCo 

unt 

Integer 32-bit signed 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

13 

L66ad 

PR_N ORM AL_M SG_W_ A 
TTACH_COUNT 

Integer 32-bit signed 

14 

L66ae 

PR_ASSOC_MSG_W_ATT 

ACH_COUNT 

Integer 32-bit signed 

15 

L66af 

PR_RECIPIENT_ON_NOR 

MAL_MSG_COUNT 

Integer 32-bit signed 

16 

L66b0 

C_MSG_COUNT 

Integer 32-bit signed 

17 

L66bl 

L_MSG_COUNT 

Integer 32-bit signed 

18 

L66b2 

_MSG_COUNT 

Integer 32-bit signed 

19 

L6750 

m— sawW 

Integer 32-bit signed 

20 

L6751 

PR_ARTICLE_NUM_NEXT 

Integer 32-bit signed 

21 

L675d 


Integer 32-bit signed 

22 

L675e 


Integer 32-bit signed 

23 

Q66b3 

PR_NORMAL_MESSAGE_ 

SIZE_EXTENDED 

Currency (64-bit) 

24 

Q66b4 

PR_ASSOC_MESSAGE_SI 

ZE_EXTENDED 

Currency (64-bit) 

25 

Qe08 

PidT agMessage SizeExtended 

Currency (64-bit) 

26 

B3fe5 

PR SECURE ORIGINATIO 
N 

Boolean 

27 

B67aa 

PR_ASSOCIATED 

Boolean 

28 

B3fe6 

PR_PUBLISH_IN_ADDRES 

S_BOOK 

Boolean 

29 

L66b6 

m ownkiconi 

Integer 32-bit signed 

30 

L66b7 


Integer 32-bit signed 

31 

B663a 

MMIM 

Boolean 

32 

T66a9 


Currency (64-bit) 

Contains a little-endian 

Filetime 

33 

Le23 

PidT aglnternet ArticleNumbe 
r 

Integer 32-bit signed 

34 

T3007 

PidT agCreationT ime 

Currency (64-bit) 

Contains a little-endian 

Filetime 

35 

T3008 

PidTagLastModificationTim 

e 

Currency (64-bit) 

Contains a little-endian 

Filetime 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

36 

L6699 

T 

Integer 32-bit signed 

37 

L6690 


Integer 32-bit signed 

38 

L6692 

PR_REPLICATION_MESS 

AGE_PRIORITY 

Integer 32-bit signed 

39 

I67a2 


Integer 16-bit signed 

40 

I679f 


Integer 16-bit signed 

41 

L3fe7 

PidT agResolveMethod 

Integer 32-bit signed 

42 

B679b 


Boolean 

43 

B67f4 


Boolean 

44 

I3f90 

PR_VERSIONING_FLAGS 

Integer 16-bit signed 

45 

B10f4 

PidT ag AttributeHidden 

Boolean 

46 

B10f5 

PidTagAttributeSystem 

Boolean 

47 

B10f6 

PidT agAttributeReadOnly 

Boolean 

48 

T6709 

E 

Currency (64-bit) 

Contains a little-endian 

Filetime 

49 

T670a 

IgjpMMMWaiMBili 

E_MAX 

Currency (64-bit) 

Contains a little-endian 

Filetime 

50 

L670b 

PR_DELETED_COUNT_TO 

TAL 

Integer 32-bit signed 

51 

L677b 

A 

Integer 32-bit signed 

52 

B671e 

_MDB 

Boolean 

53 

Be62 

ET 

Boolean 

128 

Q6748 

PR_FID 

Folder identifier 

Binary data 

129 

Q6749 

PR_PARENT_FID 

Parent folder identifier 

Binary data 

130 

Q6764 

Mailbox identifier? 

Binary data 

131 

S67ec 

Some kind of query string? 

Binary data 

132 

Q67a4 

Some kind of identifier? 

Binary data 

133 

Q67a7 


Binary data 

134 

Q67al 


Binary data 

135 

Q6791 

Some kind of identifier? 

Binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

136 

L67ed 


Binary data 

137 

L67ef 


Binary data 

138 

L67fl 

PidTagLtpParentNid 

Binary data 

139 

L67f3 

PidT agLtpRow V er 

Binary data 

140 

N3880 

PR SYNCEVENT SUPPRE 

Binary data 



SS_GUID 


256 

Ne27 

ptagNTSD 

Large binary data 

257 

N3d21 

ptagAdminNTSD 

Large binary data 

258 

N3fe0 

PR_ACL_DATA 

Large binary data 

259 

T668f 


Currency (64-bit) 

Contains a little-endian 

Filetime 

260 

N677e 


Large binary data 

261 

S3001 

PidT agDisplayN ame 

Large text 

262 

S66a7 

P mTERNETVMMi 
OUP_NAME 

Large text 

263 

S66a5 

PR_NEWSGROUP_COMP 

ONENT 

Large text 

264 

B6696 

CHOR 

Integer 8-bit unsigned 

265 

N66a6 

PR_NEWSFEED_INFO 

Large binary data 

266 

S3fe8 

PLAY_NAME 

Large text 

267 

S679c 


Large text 

268 

S3004 

PidT agC omment 

Large text 

269 

N677f 


Large binary data 

270 

N67ff 


Large binary data 

271 

N6781 


Large binary data 

272 

L67dc 


Integer 32-bit signed 

273 

L6783 

iwwi 

Integer 32-bit signed 

274 

L67dd 


Integer 32-bit signed 

275 

N6784 


Large binary data 

276 

L6788 


Integer 32-bit signed 

277 

L6799 


Integer 32-bit signed 

278 

N67ce 


Binary data 

279 

N678b 


Large binary data 

280 

N678c 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

281 

N6785 


Large binary data 

282 

N6712 


Large binary data 

283 

N6786 


Large binary data 

284 

N6787 


Large binary data 

285 

T67dl 


Currency (64-bit) 

Contains a little-endian 

Filetime 

286 

N678a 


Large binary data 

287 

Te66 

1I33El£^I11|§1 

Currency (64-bit) 

Contains a little-endian 

Filetime 

288 

N678d 


Large binary data 

289 

N678f 


Large binary data 

290 

N6790 


Large binary data 

291 

L663f 


Integer 32-bit signed 

292 

N3ffe 

TA 

Large binary data 

293 

MQ67a6 


Binary data 

294 

N67a5 


Large binary data 

295 

N6698 

PR_REPLICA_LIST 

Large binary data 

296 

N6691 

DULE 

Binary data 

297 

N65e0 


Large binary data 

298 

N65e2 


Large binary data 

299 

N65e3 

GE_LIST 

Large binary data 

300 

I67a3 


Integer 16-bit signed 

301 

I67a0 


Integer 16-bit signed 

302 

N6792 


Large binary data 

303 

N6798 


Large binary data 

304 

N6793 


Large binary data 

305 

N6804 


Large binary data 

306 

N6768 

String containing X500 path? 

Large binary data 

307 

N6794 


Large binary data 

308 

N6795 


Large binary data 

309 

N67d9 


Binary data 

310 

N6796 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

311 

N67da 


Large binary data 

312 

N6797 


Large binary data 

313 

T679e 


Currency (64-bit) 

Contains a little-endian 

Filetime 

314 

L679d 


Integer 32-bit signed 

315 

T67el 


Currency (64-bit) 

Contains a little-endian 

Filetime 

316 

N3fel 


Large binary data 

317 

L6760 


Integer 32-bit signed 

318 

T6642 

N 

Currency (64-bit) 

Contains a little-endian 

Filetime 

319 

L6640 

PR_DELETED_MSG_COU 

NT 

Integer 32-bit signed 

320 

L6643 

G_COUNT 

Integer 32-bit signed 

321 

L6641 

OUNT 

Integer 32-bit signed 

322 

Q669b 

PR_DELETED_MESSAGE_ 
S IZE_EXTENDED 

Currency (64-bit) 

323 

Q669c 

PR_DELETED_NORMAL_ 
MESSAGE SIZE EXTEND 
ED 

Currency (64-bit) 

324 

Q669d 

PR_DELETED_ASSOC_ME 

SSAGE_SIZE_EXTENDED 

Currency (64-bit) 

325 

L66c4 

PR_RETENTION_AGE_LI 

MIT 

Integer 32-bit signed 

326 

N67ec 


Large binary data 

327 

N67ee 


Large binary data 

328 

N67f0 

AILBOX 

Large binary data 

329 

N67f2 


Large binary data 

330 

S6707 

PR_URL_NAME 

Contains the folder name 
relative to the root of the 
mailbox 

Large text 

331 

L6808 


Integer 32-bit signed 

332 

Q674a 

MWMH 

Binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 



^naapaidentifieri 


333 

B66c5 

— — 1 MiliiiiiM 
READ 

Boolean 

334 

Ne59 

PftllTXSjjMODIFtfRTsiD 

Binary data 

335 

Ne58 


Binary data 

336 

L6779 

p'RiPf2quota_styl-e 

Integer 32-bit signed 

337 

S671c 


Large text 

338 

N671d 


Binary data 

339 

MN667f 

ONS 

Large binary data 

340 

B671f 

D 

Boolean 

341 

Le63 


Integer 32-bit signed 

342 

Le64 

PR_DELETED_SUBFOLDE 

R_CT 

Integer 32-bit signed 

343 

Le67 


Integer 32-bit signed 

344 

L6721 

prTpf Ma— 
OTA_LIMIT 

Integer 32-bit signed 

345 

L6722 


Integer 32-bit signed 

346 

B669e 

PRlSECMEjIN^StFE 

Boolean 

347 

N3616 

RYID 

Large binary data 

Contains an entry identifier 

348 

S669a 


Large text 

349 

MS8022 


Large text 

350 

Ne96 


Binary data 

351 

MS8021 


Large text 

352 

B6723 


Boolean 

353 

L81fe 


Integer 32-bit signed 

354 

S81e9 


Large text 


folder with a folder identifier equal to the mailbox identifier is the root folder of the mailbox, 
folder should also have an empty parent folder identifier. 



T3008 sometimes contains: 


column definition identifier 

: 028 

column definition name 

: T3008 

column definition type 

: Currency (64-bit) 

( JET_coltypCurrency) 


(028) fixed size data type size 

: 8 

00000000 : 7f 29 88 cf 7f 29 84 cf 

.)...).. 
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3.2. DeletedFolders 


3.2.1. Exchange 2003 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

L3601 

PidTagFolderType 

Integer 32-bit signed 

128 

Q6748 

PR_Fli 

Folder identifier 

Binary data 

129 

Q6764 

Mailbox identifier? 

Binary data 

256 

B6770 


Boolean 


3.2.2. Exchange 2007 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

L3601 

PidT agF olderT ype 

Integer 32-bit signed 

128 

Q6748 

PR_FID 

Folder identifier 

Binary data 

129 

Q6764 

Mailbox identifier? 

Binary data 

256 

S678d 


Large binary data 

257 

T679e 


Currency (64-bit) 

Contains a little-endian 

Filetime 

258 

L679d 


Integer 32-bit signed 

259 

B6770 


Boolean 

260 

N671d 


Binary data 


3.3. Msg 

The Msg table contain information about the messages. 

3.3.1. Exchange 2003 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

Le08 

PidTagMessageSize 

Integer 32-bit signed 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

2 

T39 

PidTagClientSubmitTim 

e 

Currency (64-bit) 

3 

L26 

PidTagPriority 

Integer 32-bit signed 

4 

L67bl 


Integer 32-bit signed 

5 

L6779 


Integer 32-bit signed 

6 

L6778 


Integer 32-bit signed 

7 

L67c8 


Integer 32-bit signed 

128 

N67b0 

Identifier? 

Binary data 

129 

N300b 

PidTagSearchKey 

Binary data 

130 

N3fca 


Binary data 

256 

N67b5 


Large binary data 

257 

N67b6 


Large binary data 

258 

N6776 


Binary data 

259 

N67b2 


Large binary data 

Contains array of 4 byte MAPI 

260 

N67b3 


Large binary data 

261 

N3fd0 

PR_REPL_HEADER 

Large binary data 

262 

N3fdl 


Large binary data 

263 

N3fd2 

PR_REPL_CH AN GE S 

Large binary data 

264 

N3fd3 


Large binary data 

265 

L65ea 

AGS 

Integer 32-bit signed 

266 

N65ef 

IM— ACTiaTl 

Large binary data 

267 

S65eb 

R 

Large text 

268 

S65ec 

PR_RULE_MSG_NAME 

Large text 

269 

L65ed 

vmmMmmmmmmm 

Integer 32-bit signed 

270 

N65ee 

PR_RULE_MSG_PROVIDE 

R_DATA 

Large binary data 

271 

Le79 


Integer 32-bit signed 

272 

L6656 


Integer 32-bit signed 

273 

Ne96 


Binary data 

274 

N6720 

C_INFO 

Large binary data 

275 

N66c7 

■linternetjHssag! 

JNFO 

Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

276 

N66c6 

TATE 

Large binary data 

277 

L66al 

HM— 

Integer 32-bit signed 

278 

B665a 

PR_HAS_ATTACH_FROM 

_IMAIL 

Boolean 

279 

L3ffd 

PidTagMessageCodepage 

Integer 32-bit signed 

280 

L3ffl 

PidTagMessageLocaleld 

Integer 32-bit signed 

281 

L3fde 

PidTaglnternetCodepage 

Integer 32-bit signed 

282 

N67b4 


Large binary data 

283 

F6659 


Super large value 

284 

MG821d 


Binary data 

285 

S8055 


Large text 

286 

B804c 


Boolean 

287 

B804a 


Boolean 

288 

B8049 


Boolean 

289 

B8048 


Boolean 

290 

B8047 


Boolean 

291 

B8046 


Boolean 

292 

S8042 


Large text 

293 

S8041 


Large text 

294 

Belf 


Boolean 

295 

MS8054 


Large text 

296 

MS8053 


Large text 

297 

S8051 


Large text 

298 

S8050 


Large text 

299 

B804e 


Boolean 

300 

MS800e 


Large text 

301 

S8043 


Large text 

302 

L6001 


Integer 32-bit signed 

303 

J1013 


Large binary data 

304 

J1009 


Large binary data 

305 

J1000 


Large binary data 

306 

J7d 


Large binary data 

307 

N71 


Large binary data 

308 

S70 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

309 

L6848 


Integer 32-bit signed 

310 

L6847 


Integer 32-bit signed 

311 

L6846 


Integer 32-bit signed 

312 

N6845 


Large binary data 

313 

N6842 


Large binary data 

314 

L6841 


Integer 32-bit signed 

315 

L683a 


Integer 32-bit signed 

316 

L6834 


Integer 32-bit signed 

317 

S3001 


Large text 

318 

L36 


Integer 32-bit signed 

319 

S3ffc 


Large text 

320 

S50 


Large text 

321 

N4f 


Large binary data 

322 

L6103 


Integer 32-bit signed 

323 

L6101 


Integer 32-bit signed 

324 

L6100 


Integer 32-bit signed 

325 

Ne9a 


Large binary data 

326 

Ne99 


Large binary data 

327 

B6107 


Boolean 

328 

S6105 


Large text 

329 

S6104 


Large text 

330 

L6102 


Integer 32-bit signed 

331 

T32 


Currency (64-bit) 

332 

B8222 


Boolean 

333 

B8221 


Boolean 

334 

L81ff 


Integer 32-bit signed 

335 

L81f8 


Integer 32-bit signed 

336 

B81ee 


Boolean 

337 

L81e9 


Integer 32-bit signed 

338 

S819e 


Large text 

339 

L819d 


Integer 32-bit signed 

340 

B8185 


Boolean 

341 

L5909 


Integer 32-bit signed 

342 

L4076 


Integer 32-bit signed 

343 

S1042 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

344 

S1000 


Large text 

345 

L2e 


Integer 32-bit signed 

346 

B2b 


Boolean 

347 

B29 


Boolean 

348 

B23 


Boolean 

349 

B2 


Boolean 

350 

S8224 


Large text 

351 

S8223 


Large text 

352 

Se29 


Large text 

353 

Se28 


Large text 

354 

Nb 


Large binary data 

355 

L6869 


Integer 32-bit signed 

356 

N67bb 


Large binary data 

357 

S1045 


Large text 

358 

S806a 


Large text 

359 

B81fa 


Boolean 

360 

N1013 


Large binary data 

361 

L81f3 


Integer 32-bit signed 

362 

L3fdf 


Integer 32-bit signed 

363 

N1009 


Large binary data 

364 

Bc06 


Boolean 

365 

ML823d 


Integer 32-bit signed 

366 

S823c 


Large text 

367 

ML823b 


Integer 32-bit signed 

368 

ML823a 


Integer 32-bit signed 

369 

S8239 


Large text 

370 

S8238 


Large text 

371 

S822e 


Large text 

372 

S822d 


Large text 

373 

S822c 


Large text 

374 

S822b 


Large text 

375 

S822a 


Large text 

376 

N8229 


Large binary data 

377 

S8228 


Large text 

378 

S8227 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

379 

B8226 


Boolean 

380 

L81c3 


Integer 32-bit signed 

381 

S81c2 


Large text 

382 

L81bd 


Integer 32-bit signed 

383 

ML81bc 


Integer 32-bit signed 

384 

N81bl 


Large binary data 

385 

S81b0 


Large text 

386 

S81ae 


Large text 

387 

S81ad 


Large text 

388 

S80a7 


Large text 

389 

S80a6 


Large text 

390 

S80a5 


Large text 

391 

S80a2 


Large text 

392 

S809e 


Large text 

393 

S809c 


Large text 

394 

L8098 


Integer 32-bit signed 

395 

S8097 


Large text 

396 

S8095 


Large text 

397 

S808d 


Large text 

398 

S3a45 


Large text 

399 

S3a44 


Large text 

400 

S3a2a 


Large text 

401 

S3a29 


Large text 

402 

S3a28 


Large text 

403 

S3a27 


Large text 

404 

S3a26 


Large text 

405 

S3a24 


Large text 

406 

S3al8 


Large text 

407 

S3al7 


Large text 

408 

S3al6 


Large text 

409 

S3al5 


Large text 

410 

S3all 


Large text 

411 

S3a0d 


Large text 

412 

S3a0c 


Large text 

413 

S3a0b 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

414 

S3a0a 


Large text 

415 

S3a08 


Large text 

416 

S3a06 


Large text 

417 

S3a05 


Large text 

418 

S3a00 


Large text 

419 

N8269 


Large binary data 

420 

N8268 


Large binary data 

421 

N8267 


Large binary data 

422 

N8266 


Large binary data 

423 

N8265 


Large binary data 

424 

N8264 


Large binary data 

425 

N8263 


Large binary data 

426 

N8262 


Large binary data 

427 

N8261 


Large binary data 

428 

N8260 


Large binary data 

429 

N825f 


Large binary data 

430 

N825e 


Large binary data 

431 

N825d 


Large binary data 

432 

N825c 


Large binary data 

433 

N825b 


Large binary data 

434 

N825a 


Large binary data 

435 

N8259 


Large binary data 

436 

N8258 


Large binary data 

437 

N8257 


Large binary data 

438 

N8256 


Large binary data 

439 

N8255 


Large binary data 

440 

N8254 


Large binary data 

441 

N8253 


Large binary data 

442 

N8252 


Large binary data 

443 

N8251 


Large binary data 

444 

N8250 


Large binary data 

445 

N824f 


Large binary data 

446 

N824e 


Large binary data 

447 

N824d 


Large binary data 

448 

N824c 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

449 

N824b 


Large binary data 

450 

N824a 


Large binary data 

451 

N8249 


Large binary data 

452 

N8248 


Large binary data 

453 

N8247 


Large binary data 

454 

N8246 


Large binary data 

455 

N8245 


Large binary data 

456 

N8244 


Large binary data 

457 

N8243 


Large binary data 

458 

N8242 


Large binary data 

459 

N8241 


Large binary data 

460 

N8240 


Large binary data 

461 

N823f 


Large binary data 

462 

N823e 


Large binary data 

463 

L3d2d 


Integer 32-bit signed 

464 

L3641 


Integer 32-bit signed 

465 

S8237 


Large text 

466 

L8236 


Integer 32-bit signed 

467 

B8235 


Boolean 

468 

B8234 


Boolean 

469 

S8233 


Large text 

470 

S8232 


Large text 

471 

S8231 


Large text 

472 

S8230 


Large text 

473 

L822f 


Integer 32-bit signed 

474 

L8225 


Integer 32-bit signed 

475 

S8208 


Large text 

476 

S8201 


Large text 

477 

B81f9 


Boolean 

478 

L81f6 


Integer 32-bit signed 

479 

T81ef 


Currency (64-bit) 

480 

T81eb 


Currency (64-bit) 

481 

L81e8 


Integer 32-bit signed 

482 

B81e7 


Boolean 

483 

S81e6 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

484 

L81cc 


Integer 32-bit signed 

485 

B81c4 


Boolean 

486 

T8199 


Currency (64-bit) 

487 

T8198 


Currency (64-bit) 

488 

T8197 


Currency (64-bit) 

489 

T8196 


Currency (64-bit) 

490 

L8193 


Integer 32-bit signed 

491 

T8192 


Currency (64-bit) 

492 

L8190 


Integer 32-bit signed 

493 

T818f 


Currency (64-bit) 

494 

T818e 


Currency (64-bit) 

495 

T818d 


Currency (64-bit) 

496 

T818a 


Currency (64-bit) 

497 

T8189 


Currency (64-bit) 

498 

T8188 


Currency (64-bit) 

499 

L8187 


Integer 32-bit signed 

500 

S811d 


Large text 

501 

L8118 


Integer 32-bit signed 

502 

S810c 


Large text 

503 

L80fc 


Integer 32-bit signed 

504 

B80fa 


Boolean 

505 

Bcl7 


Boolean 

506 

B63 


Boolean 

507 

L62 


Integer 32-bit signed 

508 

T61 


Currency (64-bit) 

509 

T60 


Currency (64-bit) 

510 

S3alc 


Large text 

511 

S3a09 


Large text 

512 

S826a 


Large text 

513 

L6e01 


Integer 32-bit signed 

514 

L5902 


Integer 32-bit signed 

515 

S74 


Large text 

516 

T4e 


Currency (64-bit) 

517 

S49 


Large text 

518 

N67b8 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

519 

N67b7 


Large binary data 

520 

B826b 


Boolean 

521 

S81d9 


Large text 

522 

S81d8 


Large text 

523 

S81d7 


Large text 

524 

L826c 


Integer 32-bit signed 

525 

S7d 


Large text 

526 

S826e 


Large text 

527 

S826d 


Large text 

528 

N81b6 


Large binary data 

529 

S81b5 


Large text 

530 

S81b3 


Large text 

531 

S81b2 


Large text 

532 

S3a5d 


Large text 

533 

S3a5b 


Large text 

534 

S3a59 


Large text 

535 

S3a50 


Large text 

536 

T3a42 


Currency (64-bit) 

537 

L8273 


Integer 32-bit signed 

538 

L8272 


Integer 32-bit signed 

539 

L8271 


Integer 32-bit signed 

540 

L8270 


Integer 32-bit signed 

541 

L826f 


Integer 32-bit signed 

542 

S3a51 


Large text 

543 

S8027 


Large text 

544 

N67fa 


Large binary data 

545 

S3a63 


Large text 

546 

S3a61 


Large text 

547 

S3a60 


Large text 

548 

S3a5f 


Large text 

549 

S3a62 


Large text 

550 

S3alf 


Large text 

551 

N8275 


Large binary data 

552 

N8274 


Large binary data 

553 

MS819b 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

554 

S827b 


Large text 

555 

S827a 


Large text 

556 

B8279 


Boolean 

557 

T8278 


Currency (64-bit) 

558 

S8277 


Large text 

559 

S8276 


Large text 

560 

18209 


Integer 16-bit signed 

561 

18206 


Integer 16-bit signed 

562 

L8200 


Integer 32-bit signed 

563 

L81fd 


Integer 32-bit signed 

564 

L81fc 


Integer 32-bit signed 

565 

S81f5 


Large text 

566 

S81f4 


Large text 

567 

I81e4 


Integer 16-bit signed 

568 

S81de 


Large text 

569 

L81d6 


Integer 32-bit signed 

570 

I81d4 


Integer 16-bit signed 

571 

B81d0 


Boolean 

572 

B81cf 


Boolean 

573 

B81ce 


Boolean 

574 

L81bf 


Integer 32-bit signed 

575 

L81be 


Integer 32-bit signed 

576 

18 lac 


Integer 16-bit signed 

577 

L81ab 


Integer 32-bit signed 

578 

L81aa 


Integer 32-bit signed 

579 

B81a4 


Boolean 

580 

I81al 


Integer 16-bit signed 

581 

L8194 


Integer 32-bit signed 

582 

S818c 


Large text 

583 

S8186 


Large text 

584 

T8114 


Currency (64-bit) 

585 

T8102 


Currency (64-bit) 

586 

S827f 


Large text 

587 

S827e 


Large text 

588 

S827d 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

589 

S827c 


Large text 

590 

S807c 


Large text 

591 

N8202 


Large binary data 

592 

N818b 


Large binary data 

593 

B8280 


Boolean 

594 

S8281 


Large text 

595 

S8283 


Large text 

596 

S8282 


Large text 

597 

N31 


Large binary data 

598 

L7007 


Integer 32-bit signed 

599 

S7006 


Large text 

600 

L7003 


Integer 32-bit signed 

601 

N683f 


Large binary data 

602 

N683c 


Large binary data 

603 

N6835 


Large binary data 

604 

G6833 


Binary data 

605 

S828e 


Large text 

606 

L828d 


Integer 32-bit signed 

607 

T828c 


Currency (64-bit) 

608 

T828b 


Currency (64-bit) 

609 

S828a 


Large text 

610 

L8289 


Integer 32-bit signed 

611 

MS813a 


Large text 

612 

N81ca 


Large binary data 

613 

N8195 


Large binary data 

614 

B7d01 


Boolean 

615 

B828f 


Boolean 

616 

B14 


Boolean 

617 

S8291 


Large text 

618 

S8290 


Large text 

619 

B8297 


Boolean 

620 

S8296 


Large text 

621 

S8295 


Large text 

622 

B8294 


Boolean 

623 

B8293 


Boolean 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

624 

B8292 


Boolean 

625 

L81f2 


Integer 32-bit signed 

626 

B81ed 


Boolean 

627 

B81ec 


Boolean 

628 

S81ea 


Large text 

629 

L8138 


Integer 32-bit signed 

630 

B8135 


Boolean 

631 

S8134 


Large text 

632 

L8133 


Integer 32-bit signed 

633 

S8132 


Large text 

634 

B8131 


Boolean 

635 

B8130 


Boolean 

636 

L812f 


Integer 32-bit signed 

637 

T812e 


Currency (64-bit) 

638 

S812d 


Large text 

639 

L812c 


Integer 32-bit signed 

640 

L812b 


Integer 32-bit signed 

641 

L812a 


Integer 32-bit signed 

642 

L8129 


Integer 32-bit signed 

643 

L8128 


Integer 32-bit signed 

644 

B8126 


Boolean 

645 

T8125 


Currency (64-bit) 

646 

B8124 


Boolean 

647 

L8123 


Integer 32-bit signed 

648 

S8122 


Large text 

649 

D8121 


Floating point double precision 
(64-bit) 

650 

L8120 


Integer 32-bit signed 

651 

T811f 


Currency (64-bit) 

652 

B8298 


Boolean 

653 

T811e 


Currency (64-bit) 

654 

B8299 


Boolean 

655 

B8137 


Boolean 

656 

ML81dc 


Integer 32-bit signed 

657 
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Large text 

1221 

S8577 


Large text 

1222 

S857c 


Large text 

1223 

S857b 


Large text 

1224 

S857a 


Large text 

1225 

S8579 


Large text 

1226 

S857e 


Large text 

1227 

S857d 


Large text 

1228 

S8580 


Large text 

1229 

S857f 


Large text 

1230 

S8582 


Large text 

1231 

S8581 


Large text 

1232 

S8583 


Large text 

1233 

S8585 


Large text 

1234 

S8584 


Large text 

1235 

S8587 


Large text 

1236 

S8586 


Large text 

1237 

S8588 


Large text 

1238 

S8589 


Large text 

1239 

S80d8 


Large text 

1240 

L80ee 


Integer 32-bit signed 

1241 

L80ed 


Integer 32-bit signed 

1242 

L80e6 


Integer 32-bit signed 

1243 

L80e5 


Integer 32-bit signed 

1244 

L80e4 


Integer 32-bit signed 

1245 

S80e0 


Large text 

1246 

S80df 


Large text 

1247 

S80dd 


Large text 

1248 

S814a 


Large text 

1249 

S808b 


Large text 

1250 

S858d 


Large text 

1251 

S858c 


Large text 

1252 

S858b 


Large text 
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Column 
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Column name 

MAPI property identifier 
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1253 

S858a 


Large text 

1254 

S8590 


Large text 

1255 

S858f 


Large text 

1256 

S858e 


Large text 

1257 

S8593 


Large text 

1258 

S8592 


Large text 

1259 

S8591 


Large text 

1260 

S8595 


Large text 

1261 

S8594 


Large text 

1262 

S8598 


Large text 

1263 

S8597 


Large text 

1264 

S8596 


Large text 

1265 

S8599 


Large text 

1266 

L8315 


Integer 32-bit signed 

1267 

S859a 


Large text 

1268 

S859c 


Large text 

1269 

S859b 


Large text 

1270 

S85a0 


Large text 

1271 

S859f 


Large text 

1272 

S859e 


Large text 

1273 

S859d 


Large text 

1274 

S85al 


Large text 

1275 

S85a2 


Large text 

1276 

N3fc9 


Large binary data 

1277 

S85a4 


Large text 

1278 

S85a3 


Large text 

1279 

S85a8 


Large text 

1280 

S85a7 


Large text 

1281 

S85a6 


Large text 

1282 

S85a5 


Large text 

1283 

S85aa 


Large text 

1284 

S85a9 


Large text 

1285 

S85ad 


Large text 

1286 

S85ac 


Large text 

1287 

S85ab 


Large text 
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Column name 

MAPI property identifier 

Column type 

1288 

S85ae 


Large text 

1289 

S85b0 


Large text 

1290 

S85af 


Large text 

1291 

S6656 


Large text 

1292 

N6655 


Large binary data 

1293 

N65e0 


Large binary data 

1294 

S85bl 


Large text 

1295 

S85b2 


Large text 

1296 

S85b4 


Large text 

1297 

S85b3 


Large text 

1298 

S85b5 


Large text 

1299 

S85b7 


Large text 

1300 

S85b6 


Large text 

1301 

S85b8 


Large text 

1302 

S85ba 


Large text 

1303 

S85b9 


Large text 

1304 

S85bc 


Large text 

1305 

S85bb 


Large text 

1306 

S85be 


Large text 

1307 

S85bd 


Large text 

1308 

S85c2 


Large text 

1309 

S85cl 


Large text 

1310 

S85c0 


Large text 

1311 

S85bf 


Large text 

1312 

S8088 


Large text 

1313 

S85c3 


Large text 

1314 

S85c7 


Large text 

1315 

S85c6 


Large text 

1316 

S85c5 


Large text 

1317 

S85c4 


Large text 

1318 

S85ca 


Large text 

1319 

S85c9 


Large text 

1320 

S85c8 


Large text 

1321 

S85cc 


Large text 

1322 

S85cb 


Large text 
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MAPI property identifier 

Column type 

1323 

S85cd 


Large text 

1324 

S85cf 


Large text 

1325 

S85ce 


Large text 

1326 

S85d0 


Large text 

1327 

S85dl 


Large text 

1328 

L831b 


Integer 32-bit signed 

1329 

S85d5 


Large text 

1330 

S85d4 


Large text 

1331 

S85d3 


Large text 

1332 

S85d2 


Large text 

1333 

S85dd 


Large text 

1334 

S85dc 


Large text 

1335 

S85db 


Large text 

1336 

S85da 


Large text 

1337 

S85d9 


Large text 

1338 

S85d8 


Large text 

1339 

S85d7 


Large text 

1340 

S85d6 


Large text 

1341 

S85df 


Large text 

1342 

S85de 


Large text 

1343 

S85e0 


Large text 

1344 

S85e3 


Large text 

1345 

S85e2 


Large text 

1346 

S85el 


Large text 

1347 

S85e4 


Large text 

1348 

S85e6 


Large text 

1349 

S85e5 


Large text 

1350 

S85e7 


Large text 

1351 

S85e8 


Large text 

1352 

S85e9 


Large text 

1353 

S85eb 


Large text 

1354 

S85ea 


Large text 

1355 

S85ed 


Large text 

1356 

S85ec 


Large text 

1357 

S85ef 


Large text 


page 48 




Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1358 

S85ee 


Large text 

1359 

S85fl 


Large text 

1360 

S85f0 


Large text 

1361 

S85f6 


Large text 

1362 

S85f5 


Large text 

1363 

S85f4 


Large text 

1364 

S85f3 


Large text 

1365 

S85f2 


Large text 

1366 

S85f7 


Large text 

1367 

S85fb 


Large text 

1368 

S85fa 


Large text 

1369 

S85f9 


Large text 

1370 

S85f8 


Large text 

1371 

S840a 


Large text 

1372 

S85fc 


Large text 

1373 

S85fd 


Large text 

1374 

L8317 


Integer 32-bit signed 

1375 

S85fe 


Large text 

1376 

S85ff 


Large text 

1377 

S8606 


Large text 

1378 

S8605 


Large text 

1379 

S8604 


Large text 

1380 

S8603 


Large text 

1381 

S8602 


Large text 

1382 

S8601 


Large text 

1383 

S8600 


Large text 

1384 

S8607 


Large text 

1385 

S8609 


Large text 

1386 

S8608 


Large text 

1387 

S860a 


Large text 

1388 

S860d 


Large text 

1389 

S860c 


Large text 

1390 

S860b 


Large text 

1391 

S8610 


Large text 

1392 

S860f 


Large text 
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1393 

S860e 


Large text 

1394 

S8611 


Large text 

1395 

S8613 


Large text 

1396 

S8612 
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1397 

S8615 
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1398 

S8614 
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1399 

S8616 
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1400 

S8618 
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S861a 
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S862e 
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S862f 
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S8633 
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1426 

S8632 
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1427 

S8631 


Large text 
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S8630 
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1429 

S8635 
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1430 

S8634 
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S8636 
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S8637 
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S8059 
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S8638 
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Large text 

1436 

S863a 
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Large text 

1440 
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Large text 

1442 

S8640 
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S8644 
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S84a4 
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L84a2 


Integer 32-bit signed 
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S864f 
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S864e 
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S8650 
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1461 

S8652 
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1462 

S8651 


Large text 


page 51 




Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1463 

S8654 
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1464 

S8653 


Large text 

1465 

S8659 


Large text 

1466 

S8658 


Large text 

1467 

S8657 


Large text 

1468 

S8656 


Large text 

1469 

S8655 


Large text 

1470 

S865a 


Large text 

1471 

S865b 


Large text 

1472 

S865c 


Large text 

1473 

S8660 


Large text 

1474 

S865f 


Large text 

1475 

S865e 


Large text 

1476 

S865d 
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1477 

S8663 
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S8662 
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S8661 
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S8668 
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S8667 
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S8666 
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S8665 


Large text 

1484 
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S866e 
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S866d 
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S866f 
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1492 

S8670 
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S805c 
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S867b 
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1495 

S867a 
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1496 

S8679 
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1497 

S8678 
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1498 

S8677 


Large text 

1499 

S8676 


Large text 

1500 

S8675 


Large text 

1501 

S8674 


Large text 

1502 

S8673 


Large text 

1503 

S8672 


Large text 

1504 

S8671 


Large text 

1505 

ML81db 


Integer 32-bit signed 

1506 

S867c 
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1507 

S867d 
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1508 

S867e 
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S8680 
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S8684 
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Large text 

1521 
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gj&^flExChanfll&yi^ 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

Le08 

PidT agMessage Size 

Integer 32-bit signed 

2 

T39 

PidT agClientSubmitT im 
e 

Currency (64-bit) 

Contains a little-endian 

Filetime 

3 

L26 

PidTagPriority 

Integer 32-bit signed 

4 

L67bl 


Integer 32-bit signed 

5 

L6779 


Integer 32-bit signed 

6 

L6778 


Integer 32-bit signed 

7 

L67c8 


Integer 32-bit signed 

128 

N67b0 

Kiilllfier? 

Binary data 

129 

N300b 

PidTagSearchKey 

Binary data 

130 

N3fca 

PR_CONFLICT_MSG_KEY 

Binary data 

256 

N67b5 


Large binary data 

257 

N67b6 


Large binary data 

258 

N6776 


Binary data 

259 

N67b2 


Large binary data 

260 

N67b3 


Large binary data 

261 

N3fd0 

PR_REPL_HEADER 

Large binary data 

262 

N3fdl 


Large binary data 

263 

N3fd2 


Large binary data 

264 

N3fd3 

i— i 

Large binary data 

265 

L65ea 

AGS 

Integer 32-bit signed 

266 

N65ef 


Large binary data 

267 

S65eb 

PR_RULE_MSG_PROVIDE 

R 

Large text 

268 

S65ec 


Large text 

269 

L65ed 


Integer 32-bit signed 

270 

N65ee 

PR_RULE_MSG_PROVIDE 

R_DATA 

Large binary data 

271 

Le79 

KMIlMiBg 

Integer 32-bit signed 

272 

L6656 


Integer 32-bit signed 

273 

N6720 

PR INTERNET «— 
C_INFO 

Large binary data 

274 

N66c7 

PR_INTERNET_MESSAGE 

Large binary data 
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identifier 

Column name 

MAPI property identifier 

Column type 





275 

N66c6 

ATE 

Large binary data 

276 

L66al 

BMBBimilSMH 

Integer 32-bit signed 

277 

B665a 

JMAIL 

Boolean 

278 

L3ffd 

PidT agMessageCodepage 

Integer 32-bit signed 

279 

L3ffl 

PidT agMessageLocaleld 

Integer 32-bit signed 

280 

L3fde 

PidTaglnternetCodepage 

Integer 32-bit signed 

281 

N71 

PidT agC onver sationlndex 

Large binary data 

282 

F6659 


Super large value 

283 

N67b4 


Large binary data 

284 

MG81e7 


Binary data 

285 

S806e 


Large text 

286 

B8065 


Boolean 

287 

B8063 


Boolean 

288 

B8062 


Boolean 

289 

B8061 


Boolean 

290 

B8060 


Boolean 

291 

B805f 


Boolean 

292 

S805b 


Large text 

293 

S805a 


Large text 

294 

Belf 


Boolean 

295 

S70 


Large text 

296 

MS806d 


Large text 

297 

MS806c 


Large text 

298 

S806a 


Large text 

299 

S8069 


Large text 

300 

B8067 


Boolean 

301 

MS8022 


Large text 

302 

Ne96 


Binary data 

303 

S805c 


Large text 

304 

S6804 


Large text 

305 

L6803 


Integer 32-bit signed 

306 

S6802 


Large text 
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identifier 

Column name 

MAPI property identifier 

Column type 

307 

L6801 


Integer 32-bit signed 

308 

S6800 


Large text 

309 

B6846 


Boolean 

310 

L6841 


Integer 32-bit signed 

311 

T6868 


Currency (64-bit) 

Contains a little-endian 

Filetime 

312 

MN6854 


Large binary data 

313 

ML6853 


Integer 32-bit signed 

314 

MN6850 


Large binary data 

315 

ML684f 


Integer 32-bit signed 

316 

S6849 


Large text 

317 

L6848 


Integer 32-bit signed 

318 

L6847 


Integer 32-bit signed 

319 

B686f 


Boolean 

320 

B686e 


Boolean 

321 

B686d 


Boolean 

322 

B6843 


Boolean 

323 

B6842 


Boolean 

324 

MN6856 


Large binary data 

325 

ML6855 


Integer 32-bit signed 

326 

MN6852 


Large binary data 

327 

ML6851 


Integer 32-bit signed 

328 

ML6871 


Integer 32-bit signed 

329 

MN6870 


Large binary data 

330 

ML686b 


Integer 32-bit signed 

331 

MN6845 


Large binary data 

332 

MS6844 


Large text 


3.4. MsgFolderTemplate 


3.4.1. Exchange 2003 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

T668f 


Currency (64-bit) 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

2 

L6743 


Integer 32-bit signed 

3 

T39 


Currency (64-bit) 

4 

I67a9 


Integer 16-bit signed 

5 

B67ad 


Boolean 

6 

Le07 


Integer 32-bit signed 

7 

B67aa 


Boolean 

8 

Be lb 


Boolean 

9 

L67bf 


Integer 32-bit signed 

10 

L3705 


Integer 32-bit signed 

11 

Le20 


Integer 32-bit signed 

12 

Lel7 


Integer 32-bit signed 

13 

L67ab 


Integer 32-bit signed 

14 

Te06 


Currency (64-bit) 

15 

L17 


Integer 32-bit signed 

16 

B67ae 


Boolean 

17 

B67af 


Boolean 

18 

B57 


Boolean 

19 

B58 


Boolean 

20 

B59 


Boolean 

21 

B3fea 


Boolean 

22 

T48 


Currency (64-bit) 

23 

T3007 


Currency (64-bit) 

24 

T3008 


Currency (64-bit) 

25 

BeOl 


Boolean 

26 

B10f6 


Boolean 

27 

T6709 


Currency (64-bit) 

128 

Q6748 


Binary data 

129 

Q3f88 


Binary data 

130 

N67b0 


Binary data 

131 

Q67a4 


Binary data 

132 

Nff9 


Binary data 

256 

N67a5 


Large binary data 

257 

MQ67a6 


Binary data 

258 

N65e0 


Large binary data 

259 

N65e2 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

260 

N65e3 


Large binary data 

261 

S3704 


Large text 

262 

N67c0 


Large binary data 

263 

N3701 

PidTagAttachDataBinary 

Large binary data 

264 

S42 


Large text 

265 

S4031 


Large text 

266 

S3001 


Large text 

267 

S39ff 


Large text 

268 

Se04 


Large text 

269 

S678e 


Large text 

270 

S6744 


Large binary data 

271 

S6800 


Large text 

272 

T6803 


Currency (64-bit) 

273 

L7003 


Integer 32-bit signed 

274 

N7005 


Large binary data 

275 

N7004 


Large binary data 

276 

S7006 


Large text 

277 

L7007 


Integer 32-bit signed 

278 

S70 


Large text 

279 

N71 


Binary data 

280 

Sla 


Large text 

281 

S3d 


Large text 

282 

Seld 


Large text 

283 

N47 


Large binary data 

284 

V6740 


Large binary data 

285 

N6745 


Large binary data 

286 

Q674a 


Binary data 

287 

Q3f80 


Binary data 

288 

N65c2 


Binary data 

289 

N3ff3 


Binary data 

290 

N3ff4 


Binary data 

291 

N3fd4 


Binary data 

292 

Le23 


Integer 32-bit signed 

293 

NIOfO 


Large binary data 

294 

S1035 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

295 

S1039 


Large text 

296 

N4068 


Large binary data 

297 

N4069 


Large binary data 

298 

S1036 


Large text 

299 

N1012 


Binary data 

300 

Q674b 


Binary data 

301 

I65f2 


Integer 16-bit signed 

302 

L65f3 


Integer 32-bit signed 

303 

L65e9 


Integer 32-bit signed 

304 

N65f0 


Large binary data 

305 

L65fl 


Integer 32-bit signed 

306 

B6753 


Boolean 

307 

N300b 


Large binary data 

308 

Le08 


Integer 32-bit signed 

309 

L26 


Integer 32-bit signed 

310 

N3fca 


Binary data 

311 

N67b5 


Large binary data 

312 

N67b6 


Large binary data 

313 

L67bl 


Integer 32-bit signed 

314 

N67b2 


Large binary data 

315 

N67b3 


Large binary data 

316 

N3fd0 


Large binary data 

317 

N3fdl 


Large binary data 

318 

N3fd2 


Large binary data 

319 

N3fd3 


Large binary data 

320 

N3fc9 


Large binary data 

321 

T67c2 


Currency (64-bit) 

322 

T67cl 


Currency (64-bit) 

323 

L65ea 


Integer 32-bit signed 

324 

N65ef 


Large binary data 

325 

S65eb 


Large text 

326 

S65ec 


Large text 

327 

L65ed 


Integer 32-bit signed 

328 

N65ee 


Large binary data 

329 

L1080 


Integer 32-bit signed 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

330 

L1081 


Integer 32-bit signed 

331 

T1082 


Currency (64-bit) 

332 

L1090 


Integer 32-bit signed 

333 

T1091 


Currency (64-bit) 

334 

L405d 


Integer 32-bit signed 

335 

N4061 


Large binary data 

336 

N4064 


Large binary data 

337 

L4065 


Integer 32-bit signed 

338 

N65el 


Large binary data 

339 

B65e8 


Boolean 

340 

S665b 


Large text 

341 

S665c 


Large text 

342 

S665d 


Large text 

343 

N665e 


Large binary data 

344 

T665f 


Currency (64-bit) 

345 

N6660 


Large binary data 

346 

N6661 


Large binary data 

347 

L6662 


Integer 32-bit signed 

348 

N6663 


Large binary data 

349 

S6664 


Large text 

350 

N6665 


Large binary data 

351 

N6666 


Large binary data 

352 

N666a 


Large binary data 

353 

B666c 


Boolean 

354 

Q6674 


Currency (64-bit) 

355 

N6675 


Large binary data 

356 

L6676 


Integer 32-bit signed 

357 

L6677 


Integer 32-bit signed 

358 

L6678 


Integer 32-bit signed 

359 

N6679 


Large binary data 

360 

N6680 


Large binary data 

361 

S6681 


Large text 

362 

S6682 


Large text 

363 

L6683 


Integer 32-bit signed 

364 

N6684 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

365 

S669a 


Large text 

366 

L66al 


Integer 32-bit signed 

367 

T66a9 


Currency (64-bit) 

368 

L6705 


Integer 32-bit signed 

369 

Q6749 


Currency (64-bit) 

370 

Q674c 


Currency (64-bit) 

371 

Q674d 


Currency (64-bit) 

372 

L674e 


Integer 32-bit signed 

373 

Q674f 


Currency (64-bit) 

374 

N6758 


Large binary data 

375 

N6759 


Large binary data 

376 

N675a 


Large binary data 

377 

N675b 


Large binary data 

378 

S676b 


Large text 

379 

B676d 


Boolean 

380 

L676e 


Integer 32-bit signed 

381 

S676f 


Large text 

382 

B6770 


Boolean 

383 

L6771 


Integer 32-bit signed 

384 

B6772 


Boolean 

385 

N678f 


Large binary data 

386 

N6790 


Large binary data 

387 

I67ac 


Integer 16-bit signed 

388 

N67b4 


Large binary data 

389 

N67b7 


Large binary data 

390 

N67b8 


Large binary data 

391 

N67bb 


Large binary data 

392 

N67bc 


Large binary data 

393 

N67d0 


Large binary data 

394 

T67dl 


Currency (64-bit) 

395 

L67de 


Integer 32-bit signed 

396 

L67df 


Integer 32-bit signed 

397 

L67ea 


Integer 32-bit signed 

398 

N67eb 


Large binary data 

399 

N67f8 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

400 

N67f9 


Large binary data 

401 

N67fa 


Large binary data 

402 

L67fb 


Integer 32-bit signed 

403 

N67fc 


Large binary data 

404 

S67fd 


Large text 

405 

T6801 


Currency (64-bit) 

406 

T6804 


Currency (64-bit) 

407 

T6806 


Currency (64-bit) 

408 

T6807 


Currency (64-bit) 

409 

T6808 


Currency (64-bit) 

410 

T6809 


Currency (64-bit) 

411 

N7001 


Large binary data 

412 

S7002 


Large text 

413 

B2 


Boolean 

414 

B5 


Boolean 

415 

N7 


Large binary data 

416 

S8 


Large text 

417 

L9 


Integer 32-bit signed 

418 

Ba 


Boolean 

419 

Nb 


Large binary data 

420 

Bd 


Boolean 

421 

Tf 


Currency (64-bit) 

422 

T10 


Currency (64-bit) 

423 

Lll 


Integer 32-bit signed 

424 

N13 


Large binary data 

425 

B14 


Boolean 

426 

T15 


Currency (64-bit) 

427 

T19 


Currency (64-bit) 

428 

N20 


Large binary data 

429 

N25 


Large binary data 

430 

B29 


Boolean 

431 

T2a 


Currency (64-bit) 

432 

N2c 


Large binary data 

433 

T30 


Currency (64-bit) 

434 

N31 


Large binary data 


page 62 




Column 

identifier 

Column name 

MAPI property identifier 

Column type 

435 

T32 


Currency (64-bit) 

436 

L34 


Integer 32-bit signed 

437 

L36 


Integer 32-bit signed 

438 

S37 


Large text 

439 

N3b 


Large binary data 

440 

N3c 


Large binary data 

441 

L3e 


Integer 32-bit signed 

442 

N3f 


Large binary data 

443 

S40 


Large text 

444 

N41 


Large binary data 

445 

N43 


Large binary data 

446 

S44 


Large text 

447 

S49 


Large text 

448 

S4b 


Large text 

449 

N4c 


Large binary data 

450 

S4d 


Large text 

451 

T4e 


Currency (64-bit) 

452 

N4f 


Large binary data 

453 

S50 


Large text 

454 

N51 


Large binary data 

455 

N52 


Large binary data 

456 

N53 


Large binary data 

457 

T55 


Currency (64-bit) 

458 

S5a 


Large text 

459 

N5b 


Large binary data 

460 

N5c 


Large binary data 

461 

S5d 


Large text 

462 

N5e 


Large binary data 

463 

N5f 


Large binary data 

464 

B63 


Boolean 

465 

S64 


Large text 

466 

S65 


Large text 

467 

S66 


Large text 

468 

S67 


Large text 

469 

S68 


Large text 


page 63 




Column 

identifier 

Column name 

MAPI property identifier 

Column type 

470 

S69 


Large text 

471 

S72 


Large text 

472 

S73 


Large text 

473 

S74 


Large text 

474 

S75 


Large text 

475 

S76 


Large text 

476 

S77 


Large text 

477 

S78 


Large text 

478 

S79 


Large text 

479 

S7a 


Large text 

480 

Bc02 


Boolean 

481 

Lc04 


Integer 32-bit signed 

482 

Lc05 


Integer 32-bit signed 

483 

Bc06 


Boolean 

484 

Bc08 


Boolean 

485 

Nc09 


Large binary data 

486 

Nell 


Large binary data 

487 

Bcl2 


Boolean 

488 

Ncl3 


Large binary data 

489 

Lcl5 


Integer 32-bit signed 

490 

Bcl7 


Boolean 

491 

Ncl9 


Large binary data 

492 

Scla 


Large text 

493 

Sclb 


Large text 

494 

Lclc 


Integer 32-bit signed 

495 

Ncld 


Large binary data 

496 

Scle 


Large text 

497 

Self 


Large text 

498 

QeOO 


Currency (64-bit) 

499 

Se02 


Large text 

500 

Se03 


Large text 

501 

Se05 


Large text 

502 

Ne09 


Large binary data 

503 

NeOa 


Large binary data 

504 

BeOc 


Boolean 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

505 

NeOd 


Large binary data 

506 

BeOf 


Boolean 

507 

LelO 


Integer 32-bit signed 

508 

Lell 


Integer 32-bit signed 

509 

Oel2 


Large binary data 

510 

Oel3 


Large binary data 

511 

Lel4 


Integer 32-bit signed 

512 

Lel5 


Integer 32-bit signed 

513 

Lel6 


Integer 32-bit signed 

514 

Lelc 


Integer 32-bit signed 

515 

Belf 


Boolean 

516 

Le21 


Integer 32-bit signed 

517 

Se24 


Large text 

518 

Lff4 


Integer 32-bit signed 

519 

Lff5 


Integer 32-bit signed 

520 

Nff6 


Large binary data 

521 

Lff7 


Integer 32-bit signed 

522 

Nff8 


Large binary data 

523 

Nffa 


Large binary data 

524 

Nffb 


Large binary data 

525 

Nffc 


Large binary data 

526 

Nffd 


Large binary data 

527 

Lffe 


Integer 32-bit signed 

528 

Nfff 


Large binary data 

529 

S1000 


Large text 

530 

S1001 


Large text 

531 

N1002 


Large binary data 

532 

N1003 


Large binary data 

533 

L1006 


Integer 32-bit signed 

534 

L1007 


Integer 32-bit signed 

535 

S1008 


Large text 

536 

N1009 


Large binary data 

537 

L1010 


Integer 32-bit signed 

538 

L1011 


Integer 32-bit signed 

539 

S1030 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

540 

S1031 


Large text 

541 

S1032 


Large text 

542 

S1033 


Large text 

543 

L1034 


Integer 32-bit signed 

544 

S1037 


Large text 

545 

S1038 


Large text 

546 

S103a 


Large text 

547 

N103b 


Large binary data 

548 

S103c 


Large text 

549 

N103d 


Large binary data 

550 

S103e 


Large text 

551 

B103f 


Boolean 

552 

S1040 


Large text 

553 

S1041 


Large text 

554 

N1100 


Large binary data 

555 

N1101 


Large binary data 

556 

L3000 


Integer 32-bit signed 

557 

S3002 


Large text 

558 

S3003 


Large text 

559 

S3004 


Large text 

560 

L3005 


Integer 32-bit signed 

561 

S3301 


Large text 

562 

G3302 


Binary data 

563 

S3303 


Large text 

564 

S3304 


Large text 

565 

S3305 


Large text 

566 

ML3306 


Integer 32-bit signed 

567 

B3307 


Boolean 

568 

S3308 


Large text 

569 

G3309 


Binary data 

570 

L330a 


Integer 32-bit signed 

571 

N3702 


Large binary data 

572 

S3703 


Large text 

573 

S3707 


Large text 

574 

S3708 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

575 

N3709 


Large binary data 

576 

N370a 


Large binary data 

577 

L370b 


Integer 32-bit signed 

578 

S370c 


Large text 

579 

S370d 


Large text 

580 

S370e 


Large text 

581 

N370f 


Large binary data 

582 

N3fc8 


Large binary data 

583 

N3fd5 


Large binary data 

584 

L3fde 


Integer 32-bit signed 

585 

L3fdf 


Integer 32-bit signed 

586 

B3fe4 


Boolean 

587 

B3fe5 


Boolean 

588 

L3fed 


Integer 32-bit signed 

589 

L3fee 


Integer 32-bit signed 

590 

T3fef 


Currency (64-bit) 

591 

N3ff0 


Large binary data 

592 

L3ffl 


Integer 32-bit signed 

593 

N3ff2 


Large binary data 

594 

L3ff5 


Integer 32-bit signed 

595 

L3ff6 


Integer 32-bit signed 

596 

S3ff7 


Large text 

597 

S3ff8 


Large text 

598 

N3ff9 


Large binary data 

599 

S3ffa 


Large text 

600 

N3ffb 


Large binary data 

601 

S3ffc 


Large text 

602 

L3ffd 


Integer 32-bit signed 

603 

B3fff 


Boolean 

604 

L4000 


Integer 32-bit signed 

605 

L4001 


Integer 32-bit signed 

606 

L4002 


Integer 32-bit signed 

607 

L4003 


Integer 32-bit signed 

608 

L4004 


Integer 32-bit signed 

609 

L4005 


Integer 32-bit signed 


page 67 




Column 

identifier 

Column name 

MAPI property identifier 

Column type 

610 

L4006 


Integer 32-bit signed 

611 

L4007 


Integer 32-bit signed 

612 

L4009 


Integer 32-bit signed 

613 

L400a 


Integer 32-bit signed 

614 

L400b 


Integer 32-bit signed 

615 

L400c 


Integer 32-bit signed 

616 

L400d 


Integer 32-bit signed 

617 

L400e 


Integer 32-bit signed 

618 

L400f 


Integer 32-bit signed 

619 

L4010 


Integer 32-bit signed 

620 

N4011 


Large binary data 

621 

L4012 


Integer 32-bit signed 

622 

L4013 


Integer 32-bit signed 

623 

L4014 


Integer 32-bit signed 

624 

L4015 


Integer 32-bit signed 

625 

L4016 


Integer 32-bit signed 

626 

L4017 


Integer 32-bit signed 

627 

L4019 


Integer 32-bit signed 

628 

L401a 


Integer 32-bit signed 

629 

L401b 


Integer 32-bit signed 

630 

L401c 


Integer 32-bit signed 

631 

L401d 


Integer 32-bit signed 

632 

L401e 


Integer 32-bit signed 

633 

L401f 


Integer 32-bit signed 

634 

L4020 


Integer 32-bit signed 

635 

N4021 


Large binary data 

636 

L4059 


Integer 32-bit signed 

637 

L405a 


Integer 32-bit signed 

638 

L405b 


Integer 32-bit signed 

639 

L405c 


Integer 32-bit signed 

640 

S10f3 

Attachment filename? 

Large text 

641 

N6776 


Binary data 

642 

L6710 


Integer 32-bit signed 

643 

L6711 


Integer 32-bit signed 

644 

L6712 


Integer 32-bit signed 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

645 

B6713 


Boolean 

646 

B6714 


Boolean 

647 

B6715 


Boolean 

648 

N6716 


Large binary data 

649 

N6717 


Large binary data 

650 

N6718 


Large binary data 

651 

S6719 


Large text 

652 

S671a 


Large text 

653 

S671b 


Large text 

654 

B6708 


Boolean 

655 

L6600 


Integer 32-bit signed 

656 

L6601 


Integer 32-bit signed 

657 

L6602 


Integer 32-bit signed 

658 

L6603 


Integer 32-bit signed 

659 

L6604 


Integer 32-bit signed 

660 

Ne27 


Large binary data 

661 

T6654 


Currency (64-bit) 

662 

B10f4 


Boolean 

663 

B10f5 


Boolean 

664 

MG670C 


Large binary data 

665 

S6707 


Large text 

666 

Le61 


Integer 32-bit signed 

667 

Be62 


Boolean 

668 

Ne96 


Binary data 

669 

Q65a0 


Binary data 


3.4.2. Exchange 2007 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

T668f 


Currency (64-bit) 

Contains a little-endian 

Filetime 

2 

L6743 


Integer 32-bit signed 

3 

T39 


Currency (64-bit) 

Contains a little-endian 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 




Filetime 

4 

I67a9 


Integer 16-bit signed 

5 

B67ad 


Boolean 

6 

Le07 


Integer 32-bit signed 

7 

B67aa 


Boolean 

8 

Be lb 


Boolean 

9 

L67bf 


Integer 32-bit signed 

10 

L3705 


Integer 32-bit signed 

11 

Le20 


Integer 32-bit signed 

12 

Lel7 


Integer 32-bit signed 

13 

L67ab 


Integer 32-bit signed 

14 

Te06 


Currency (64-bit) 

Contains a little-endian 

Filetime 

15 

L17 


Integer 32-bit signed 

16 

B67ae 


Boolean 

17 

B67af 


Boolean 

18 

B57 


Boolean 

19 

B58 


Boolean 

20 

B59 


Boolean 

21 

B3fea 


Boolean 

22 

T48 


Currency (64-bit) 

Contains a little-endian 

Filetime 

23 

T3007 


Currency (64-bit) 

Contains a little-endian 

Filetime 

24 

T3008 


Currency (64-bit) 

Contains a little-endian 

Filetime 

25 

BeOl 


Boolean 

26 

B10f6 


Boolean 

27 

T6709 


Currency (64-bit) 

Contains a little-endian 

Filetime 

128 

Q6748 

PR__Fjpf 

Folder identifier 

Binary data 

129 

Q3f88 


Binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

130 

N67b0 

Identifier? 

Binary data 

131 

Q67a4 


Binary data 

132 

Nff9 


Binary data 

256 

N67a5 


Large binary data 

257 

MQ67a6 


Binary data 

258 

N65e0 


Large binary data 

259 

N65e2 

BLchan<P— t 

Large binary data 

260 

N65e3 

GE_LIST 

Large binary data 

261 

S3704 


Large text 

262 

N67c0 


Large binary data 

263 

N3701 

PidT agAttachDataBinary 

Large binary data 

264 

S42 


Large text 

265 

S4031 


Large text 

266 

S3001 

PidT agDisplayN ame 

Large text 

267 

S39ff 

PidTag7BitDisplayName 

Large text 

268 

Se04 


Large text 

269 

S678e 


Large text 

270 

S6744 


Large binary data 

271 

S6800 


Large text 

272 

T6803 


Currency (64-bit) 

Contains a little-endian 

Filetime 

273 

L7003 


Integer 32-bit signed 

274 

N7005 


Large binary data 

275 

N7004 


Large binary data 

276 

S7006 


Large text 

277 

L7007 


Integer 32-bit signed 

278 

S70 


Large text 

279 

N71 


Binary data 

280 

Sla 


Large text 

281 

S3d 


Large text 

282 

Seld 


Large text 

283 

N47 


Large binary data 

284 

V6740 


Large binary data 

285 

N6745 


Large binary data 


page 71 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

286 

Q674a 

PR_MID 

Message identifier? 

Binary data 

287 

Q3f80 


Binary data 

288 

N65c2 


Binary data 

289 

N3ff3 


Binary data 

290 

N3ff4 


Binary data 

291 

N3fd4 


Binary data 

292 

Le23 


Integer 32-bit signed 

293 

NIOfO 


Large binary data 

294 

S1035 


Large text 

295 

S1039 


Large text 

296 

N4068 


Large binary data 

297 

N4069 


Large binary data 

298 

S1036 


Large text 

299 

N1012 


Binary data 

300 

Q674b 


Binary data 

301 

I65f2 


Integer 16-bit signed 

302 

L65f3 


Integer 32-bit signed 

303 

L65e9 


Integer 32-bit signed 

304 

N65f0 


Large binary data 

305 

L65fl 


Integer 32-bit signed 

306 

B6753 


Boolean 

307 

N300b 


Large binary data 

308 

Le08 


Integer 32-bit signed 

309 

L26 


Integer 32-bit signed 

310 

N3fca 


Binary data 

311 

N67b5 


Large binary data 

312 

N67b6 


Large binary data 

313 

L67bl 


Integer 32-bit signed 

314 

N67b2 


Large binary data 

315 

N67b3 


Large binary data 

316 

N3fd0 


Large binary data 

317 

N3fdl 


Large binary data 

318 

N3fd2 


Large binary data 

319 

N3fd3 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

320 

N3fc9 


Large binary data 

321 

T67c2 


Currency (64-bit) 

Contains a little-endian 

Filetime 

322 

T67cl 


Currency (64-bit) 

Contains a little-endian 

Filetime 

323 

L65ea 


Integer 32-bit signed 

324 

N65ef 


Large binary data 

325 

S65eb 


Large text 

326 

S65ec 


Large text 

327 

L65ed 


Integer 32-bit signed 

328 

N65ee 


Large binary data 

329 

L1080 


Integer 32-bit signed 

330 

L1081 


Integer 32-bit signed 

331 

T1082 


Currency (64-bit) 

Contains a little-endian 

Filetime 

332 

L1090 


Integer 32-bit signed 

333 

T1091 


Currency (64-bit) 

Contains a little-endian 

Filetime 

334 

L405d 


Integer 32-bit signed 

335 

N4061 


Large binary data 

336 

N4064 


Large binary data 

337 

L4065 


Integer 32-bit signed 

338 

N65el 


Large binary data 

339 

B65e8 


Boolean 

340 

S665b 


Large text 

341 

S665c 


Large text 

342 

S665d 


Large text 

343 

N665e 


Large binary data 

344 

T665f 


Currency (64-bit) 

Contains a little-endian 

Filetime 

345 

N6660 


Large binary data 

346 

N6661 


Large binary data 

347 

L6662 


Integer 32-bit signed 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

348 

N6663 


Large binary data 

349 

S6664 


Large text 

350 

N6665 


Large binary data 

351 

N6666 


Large binary data 

352 

N666a 


Large binary data 

353 

B666c 


Boolean 

354 

Q6674 


Currency (64-bit) 

355 

N6675 


Large binary data 

356 

L6676 


Integer 32-bit signed 

357 

L6677 


Integer 32-bit signed 

358 

L6678 


Integer 32-bit signed 

359 

N6679 


Large binary data 

360 

N6680 


Large binary data 

361 

S6681 


Large text 

362 

S6682 


Large text 

363 

L6683 


Integer 32-bit signed 

364 

N6684 


Large binary data 

365 

S669a 


Large text 

366 

L66al 


Integer 32-bit signed 

367 

T66a9 


Currency (64-bit) 

Contains a little-endian 

Filetime 

368 

L6705 


Integer 32-bit signed 

369 

Q6749 

PR_PARENT_FID 

Parent folder identifier 

Currency (64-bit) 

370 

Q674c 


Currency (64-bit) 

371 

Q674d 


Currency (64-bit) 

372 

L674e 


Integer 32-bit signed 

373 

Q674f 


Currency (64-bit) 

374 

N6758 


Large binary data 

375 

N6759 


Large binary data 

376 

N675a 


Large binary data 

377 

N675b 


Large binary data 

378 

S676b 


Large text 

379 

B676d 


Boolean 

380 

L676e 


Integer 32-bit signed 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

381 

S676f 


Large text 

382 

B6770 


Boolean 

383 

L6771 


Integer 32-bit signed 

384 

B6772 


Boolean 

385 

N678f 


Large binary data 

386 

N6790 


Large binary data 

387 

I67ac 


Integer 16-bit signed 

388 

N67b4 


Large binary data 

389 

N67b7 


Large binary data 

390 

N67b8 


Large binary data 

391 

N67bb 


Large binary data 

392 

N67bc 


Large binary data 

393 

N67d0 


Large binary data 

394 

T67dl 


Currency (64-bit) 

Contains a little-endian 

Filetime 

395 

L67de 


Integer 32-bit signed 

396 

L67df 


Integer 32-bit signed 

397 

L67ea 


Integer 32-bit signed 

398 

N67eb 


Large binary data 

399 

N67f8 


Large binary data 

400 

N67f9 


Large binary data 

401 

N67fa 


Large binary data 

402 

L67fb 


Integer 32-bit signed 

403 

N67fc 


Large binary data 

404 

S67fd 


Large text 

405 

T6801 


Currency (64-bit) 

Contains a little-endian 

Filetime 

406 

T6804 


Currency (64-bit) 

Contains a little-endian 

Filetime 

407 

T6806 


Currency (64-bit) 

Contains a little-endian 

Filetime 

408 

T6807 


Currency (64-bit) 

Contains a little-endian 

Filetime 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

409 

T6808 


Currency (64-bit) 

Contains a little-endian 

Filetime 

410 

T6809 


Currency (64-bit) 

Contains a little-endian 

Filetime 

411 

N7001 


Large binary data 

412 

S7002 


Large text 

413 

B2 


Boolean 

414 

B5 


Boolean 

415 

N7 


Large binary data 

416 

S8 


Large text 

417 

L9 


Integer 32-bit signed 

418 

Ba 


Boolean 

419 

Nb 


Large binary data 

420 

Bd 


Boolean 

421 

Tf 


Currency (64-bit) 

Contains a little-endian 

Filetime 

422 

T10 


Currency (64-bit) 

Contains a little-endian 

Filetime 

423 

Lll 


Integer 32-bit signed 

424 

N13 


Large binary data 

425 

B14 


Boolean 

426 

T15 


Currency (64-bit) 

Contains a little-endian 

Filetime 

427 

T19 


Currency (64-bit) 

Contains a little-endian 

Filetime 

428 

N20 


Large binary data 

429 

N25 


Large binary data 

430 

B29 


Boolean 

431 

T2a 


Currency (64-bit) 

Contains a little-endian 

Filetime 

432 

N2c 


Large binary data 

433 

T30 


Currency (64-bit) 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 




Contains a little-endian 

Filetime 

434 

N31 


Large binary data 

435 

T32 


Currency (64-bit) 

Contains a little-endian 

Filetime 

436 

L34 


Integer 32-bit signed 

437 

L36 


Integer 32-bit signed 

438 

S37 


Large text 

439 

N3b 


Large binary data 

440 

N3c 


Large binary data 

441 

L3e 


Integer 32-bit signed 

442 

N3f 


Large binary data 

443 

S40 


Large text 

444 

N41 


Large binary data 

445 

N43 


Large binary data 

446 

S44 


Large text 

447 

S49 


Large text 

448 

S4b 


Large text 

449 

N4c 


Large binary data 

450 

S4d 


Large text 

451 

T4e 


Currency (64-bit) 

Contains a little-endian 

Filetime 

452 

N4f 


Large binary data 

453 

S50 


Large text 

454 

N51 


Large binary data 

455 

N52 


Large binary data 

456 

N53 


Large binary data 

457 

T55 


Currency (64-bit) 

Contains a little-endian 

Filetime 

458 

S5a 


Large text 

459 

N5b 


Large binary data 

460 

N5c 


Large binary data 

461 

S5d 


Large text 

462 

N5e 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

463 

N5f 


Large binary data 

464 

B63 


Boolean 

465 

S64 


Large text 

466 

S65 


Large text 

467 

S66 


Large text 

468 

S67 


Large text 

469 

S68 


Large text 

470 

S69 


Large text 

471 

S72 


Large text 

472 

S73 


Large text 

473 

S74 


Large text 

474 

S75 


Large text 

475 

S76 


Large text 

476 

S77 


Large text 

477 

S78 


Large text 

478 

S79 


Large text 

479 

S7a 


Large text 

480 

Bc02 


Boolean 

481 

Lc04 


Integer 32-bit signed 

482 

Lc05 


Integer 32-bit signed 

483 

Bc06 


Boolean 

484 

Bc08 


Boolean 

485 

Nc09 


Large binary data 

486 

Nell 


Large binary data 

487 

Bcl2 


Boolean 

488 

Ncl3 


Large binary data 

489 

Lcl5 


Integer 32-bit signed 

490 

Bcl7 


Boolean 

491 

Ncl9 


Large binary data 

492 

Scla 


Large text 

493 

Sclb 


Large text 

494 

Lclc 


Integer 32-bit signed 

495 

Ncld 


Large binary data 

496 

Scle 


Large text 

497 

Self 


Large text 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

498 

QeOO 


Currency (64-bit) 

499 

Se02 


Large text 

500 

Se03 


Large text 

501 

Se05 


Large text 

502 

Ne09 


Large binary data 

503 

NeOa 


Large binary data 

504 

BeOc 


Boolean 

505 

NeOd 


Large binary data 

506 

BeOf 


Boolean 

507 

LelO 


Integer 32-bit signed 

508 

Lell 


Integer 32-bit signed 

509 

Oel2 


Large binary data 

510 

Oel3 


Large binary data 

511 

Lel4 


Integer 32-bit signed 

512 

Lel5 


Integer 32-bit signed 

513 

Lel6 


Integer 32-bit signed 

514 

Lelc 


Integer 32-bit signed 

515 

Belf 


Boolean 

516 

Le21 


Integer 32-bit signed 

517 

Se24 


Large text 

518 

Lff4 


Integer 32-bit signed 

519 

Lff5 


Integer 32-bit signed 

520 

Nff6 


Large binary data 

521 

Lff7 


Integer 32-bit signed 

522 

Nff8 


Large binary data 

523 

Nffa 


Large binary data 

524 

Nffb 


Large binary data 

525 

Nffc 


Large binary data 

526 

Nffd 


Large binary data 

527 

Lffe 


Integer 32-bit signed 

528 

Nfff 


Large binary data 

529 

S1000 


Large text 

530 

S1001 


Large text 

531 

N1002 


Large binary data 

532 

N1003 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

533 

L1006 


Integer 32-bit signed 

534 

L1007 


Integer 32-bit signed 

535 

S1008 


Large text 

536 

N1009 


Large binary data 

537 

L1010 


Integer 32-bit signed 

538 

L1011 


Integer 32-bit signed 

539 

S1030 


Large text 

540 

S1031 


Large text 

541 

S1032 


Large text 

542 

S1033 


Large text 

543 

L1034 


Integer 32-bit signed 

544 

S1037 


Large text 

545 

S1038 


Large text 

546 

S103a 


Large text 

547 

N103b 


Large binary data 

548 

S103c 


Large text 

549 

N103d 


Large binary data 

550 

S103e 


Large text 

551 

B103f 


Boolean 

552 

S1040 


Large text 

553 

S1041 


Large text 

554 

N1100 


Large binary data 

555 

N1101 


Large binary data 

556 

L3000 


Integer 32-bit signed 

557 

S3002 


Large text 

558 

S3003 


Large text 

559 

S3004 

PidTagComment 

Large text 

560 

L3005 


Integer 32-bit signed 

561 

S3301 


Large text 

562 

G3302 


Binary data 

563 

S3303 


Large text 

564 

S3304 


Large text 

565 

S3305 


Large text 

566 

ML3306 


Integer 32-bit signed 

567 

B3307 


Boolean 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

568 

S3308 


Large text 

569 

G3309 


Binary data 

570 

L330a 


Integer 32-bit signed 

571 

N3702 


Large binary data 

572 

S3703 


Large text 

573 

S3707 


Large text 

574 

S3708 


Large text 

575 

N3709 


Large binary data 

576 

N370a 


Large binary data 

577 

L370b 


Integer 32-bit signed 

578 

S370c 


Large text 

579 

S370d 


Large text 

580 

S370e 


Large text 

581 

N370f 


Large binary data 

582 

N3fc8 


Large binary data 

583 

N3fd5 


Large binary data 

584 

L3fde 


Integer 32-bit signed 

585 

L3fdf 


Integer 32-bit signed 

586 

B3fe4 


Boolean 

587 

B3fe5 


Boolean 

588 

L3fed 


Integer 32-bit signed 

589 

L3fee 


Integer 32-bit signed 

590 

T3fef 


Currency (64-bit) 

Contains a little-endian 

Filetime 

591 

N3ff0 


Large binary data 

592 

L3ffl 


Integer 32-bit signed 

593 

N3ff2 


Large binary data 

594 

L3ff5 


Integer 32-bit signed 

595 

L3ff6 


Integer 32-bit signed 

596 

S3ff7 


Large text 

597 

S3ff8 


Large text 

598 

N3ff9 


Large binary data 

599 

S3ffa 


Large text 

600 

N3ffb 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

601 

S3ffc 


Large text 

602 

L3ffd 


Integer 32-bit signed 

603 

B3fff 


Boolean 

604 

L4000 


Integer 32-bit signed 

605 

L4001 


Integer 32-bit signed 

606 

L4002 


Integer 32-bit signed 

607 

L4003 


Integer 32-bit signed 

608 

L4004 


Integer 32-bit signed 

609 

L4005 


Integer 32-bit signed 

610 

L4006 


Integer 32-bit signed 

611 

L4007 


Integer 32-bit signed 

612 

L4009 


Integer 32-bit signed 

613 

L400a 


Integer 32-bit signed 

614 

L400b 


Integer 32-bit signed 

615 

L400c 


Integer 32-bit signed 

616 

L400d 


Integer 32-bit signed 

617 

L400e 


Integer 32-bit signed 

618 

L400f 


Integer 32-bit signed 

619 

L4010 


Integer 32-bit signed 

620 

N4011 


Large binary data 

621 

L4012 


Integer 32-bit signed 

622 

L4013 


Integer 32-bit signed 

623 

L4014 


Integer 32-bit signed 

624 

L4015 


Integer 32-bit signed 

625 

L4016 


Integer 32-bit signed 

626 

L4017 


Integer 32-bit signed 

627 

L4019 


Integer 32-bit signed 

628 

L401a 


Integer 32-bit signed 

629 

L401b 


Integer 32-bit signed 

630 

L401c 


Integer 32-bit signed 

631 

L401d 


Integer 32-bit signed 

632 

L401e 


Integer 32-bit signed 

633 

L401f 


Integer 32-bit signed 

634 

L4020 


Integer 32-bit signed 

635 

N4021 


Large binary data 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

636 

L4059 


Integer 32-bit signed 

637 

L405a 


Integer 32-bit signed 

638 

L405b 


Integer 32-bit signed 

639 

L405c 


Integer 32-bit signed 

640 

S10f3 


Large text 

641 

N6776 


Binary data 

642 

L6710 


Integer 32-bit signed 

643 

L6711 


Integer 32-bit signed 

644 

L6712 


Integer 32-bit signed 

645 

B6713 


Boolean 

646 

B6714 


Boolean 

647 

B6715 


Boolean 

648 

N6716 


Large binary data 

649 

N6717 


Large binary data 

650 

N6718 


Large binary data 

651 

S6719 


Large text 

652 

S671a 


Large text 

653 

S671b 


Large text 

654 

B6708 


Boolean 

655 

L6600 


Integer 32-bit signed 

656 

L6601 


Integer 32-bit signed 

657 

L6602 


Integer 32-bit signed 

658 

L6603 


Integer 32-bit signed 

659 

L6604 


Integer 32-bit signed 

660 

Ne27 

ptagNTSD 

Large binary data 

661 

T6654 


Currency (64-bit) 

Contains a little-endian 

Filetime 

662 

B10f4 


Boolean 

663 

B10f5 


Boolean 

664 

MG670c 


Large binary data 

665 

S6707 


Large text 

666 

Q3f81 


Binary data 

667 

Q3f82 


Binary data 

668 

T3f83 


Currency (64-bit) 

Contains a little-endian 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 




Filetime 

669 

S3f84 


Text 

670 

L3f85 


Integer 32-bit signed 

671 

N3f86 


Binary data 

672 

L3f87 


Integer 32-bit signed 

673 

Le61 


Integer 32-bit signed 

674 

S3f8d 


Text 

675 

MS3f8e 


Text 

676 

S3f8f 


Text 

677 

MS3f92 


Text 

678 

MS3f93 


Text 

679 

N3f91 


Binary data 

680 

N3f94 


Binary data 

681 

Be62 


Boolean 

682 

N6810 


Binary data 

683 

Ne96 


Binary data 


3.5. Mailbox 

The Mailbox table contain information about the mailboxes. 


3.5.1. Exchange 2003 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

BeOl 

PidTagDeleteAfterSubmit 

Boolean 

2 

B676d 


Boolean 

3 

L676e 


Integer 32-bit signed 

4 

Qe08 

PidTagMessageSizeExtended 

Currency (64-bit) 

5 

Q6774 


Currency (64-bit) 

6 

B6770 


Boolean 

7 

B661d 


Boolean 

8 

B6772 


Boolean 

9 

L6779 


Integer 32-bit signed 

10 

L677a 


Integer 32-bit signed 

11 

L677b 


Integer 32-bit signed 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 



1 


12 

L677c 


Integer 32-bit signed 

13 

L6771 


Integer 32-bit signed 

14 

L3602 

PidT agContentC ount 

Integer 32-bit signed 

15 

L3617 

PidTagAssociatedContentCo 

unt 

Integer 32-bit signed 

16 

T66a2 


Currency (64-bit) 

17 

T66a3 


Currency (64-bit) 

18 

L6777 


Integer 32-bit signed 

19 

B66a5 

ONENT 

Boolean 

20 

B680b 


Boolean 

128 

Q6764 

Mailbox identifier? 

Binary data 

129 

N676a 


Binary data 

Miall ~aiGU'B 

130 

N676c 


Binary data 

IMlaMi 

131 

N6766 


Binary data 

132 

S6775 

Mailbox user's lastname? 

Text 

133 

S6776 

Mailbox user's firstname? 

Text 

134 

S6778 

Mailbox user's fullname? 

Text 

135 

N66a0 

User's SID? 

Binary data 

256 

S676b 

System name? 

Large binary data 

257 

S3001 

PidTagDisplayName 

Large text 

258 

S39ff 

PidT ag7BitDisplayN ame 

Large text 

259 

S3004 

PidTagComment 

Large text 

260 

V6740 


Large binary data 

261 

L6640 

NT 

Integer 32-bit signed 

262 

L6643 

^MI>EEE'TED^Aimbm^ 

G_COUNT 

Integer 32-bit signed 

263 

Q669b 

PR_DELETED_MESSAGE_ 

SIZE_EXTENDED 

Currency (64-bit) 

264 

Q669c 

PR_DELETED_NORMAL_ 
MESSAGE SIZE EXTEND 
ED 

Currency (64-bit) 

265 

Q669d 

PR_DELETED_ASSOC_ME 

SSAGE_SIZE_EXTENDED 

Currency (64-bit) 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

266 

S6773 

Mailbox user's fullname? 

Large text 

267 

S40 

PidTagReceivedByName 

Large text 

268 

S676f 


Large binary data 

269 

L66c4 

PR_RETENTION_AGE_LI 

MIT 

Integer 32-bit signed 

270 

N65f6 


Large binary data 

271 

L6805 


Integer 32-bit signed 

272 

L6806 


Integer 32-bit signed 

273 

Ne27 

ptagNTSD 

Large binary data 

274 

T680c 


Currency (64-bit) 

275 

S66a0 

PRlNT7USERkNAME 

Large text 


3.5.2. Exchange 20Qf 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

BeOl 

PidT agDelete After Submit 

Boolean 

2 

B676d 


Boolean 

3 

L676e 


Integer 32-bit signed 

4 

Qe08 

PidTagMessageSizeExtended 

Currency (64-bit) 

5 

Q6774 


Currency (64-bit) 

6 

B6770 


Boolean 

7 

B661d 

jamwiMMasi 

Boolean 

8 

B6772 


Boolean 

9 

L6779 


Integer 32-bit signed 

10 

L677a 


Integer 32-bit signed 

11 

L677b 

A 

Integer 32-bit signed 

12 

L677c 


Integer 32-bit signed 

13 

L6771 


Integer 32-bit signed 

14 

L3602 

PidT agContentC ount 

Integer 32-bit signed 

15 

L3617 

PidTagAssociatedContentCo 

unt 

Integer 32-bit signed 

16 

T66a2 


Currency (64-bit) 

Contains a little-endian 

Filetime 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

17 

T66a3 

WM W 

Currency (64-bit) 

Contains a little-endian 

Filetime 

18 

L6777 


Integer 32-bit signed 

19 

B66a5 

PR_NEWSGROUP_COMP 

ONENT 

Boolean 

20 

B680b 


Boolean 

21 

L6810 


Integer 32-bit signed 

22 

L680d 


Integer 32-bit signed 

23 

T6813 


Currency (64-bit) 

Contains a little-endian 

Filetime 

128 

Q6764 

Mailbox identifier? 

Binary data 

129 

N676a 


Binary data 

130 

N676c 


Binary data 

jjiHKMB 

131 

N6766 


Binary data 

132 

S6775 

Mailbox user's lastname? 

Text 

133 

S6776 

Mailbox user's firstname? 

Text 

134 

S6778 

Mailbox user's fullname? 

Text 

135 

N66a0 


Binary data 

256 

S676b 

System name? 

Large binary data 

257 

S3001 

PidT agDisplayN ame 

Large text 

258 

S39ff 

PidTag7BitDisplayName 

Large text 

259 

S3004 

PidTagComment 

Large text 

260 

V6740 


Large binary data 

261 

L6640 

PR_DELETED_MSG_COU 

NT 

Integer 32-bit signed 

262 

L6643 

G_COUNT 

Integer 32-bit signed 

263 

Q669b 

PR_DELETED_MESSAGE_ 

SIZE_EXTENDED 

Currency (64-bit) 

264 

Q669c 

PR_DELETED_NORMAL_ 

MESSAGE_SIZE_EXTEND 

ED 

Currency (64-bit) 

265 

Q669d 

PR_DELETED_ASSOC_ME 

SSAGE_SIZE_EXTENDED 

Currency (64-bit) 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

266 

S6773 

Mailbox user's fullname? 

Large text 

267 

S40 

PidT agReceivedByN ame 

Large text 

268 

S676f 


Large binary data 

269 

S66a0 


Large text 

270 

L66c4 

pr_retention^BBB 

MIT 

Integer 32-bit signed 

271 

N65f6 


Large binary data 

272 

L6805 


Integer 32-bit signed 

273 

L6806 


Integer 32-bit signed 

274 

Ne27 

ptagNTSD 

Large binary data 

275 

T680c 


Currency (64-bit) 

Contains a little-endian 

Filetime 


3.6. MailboxTombstone 


3.6.1. Exchange 2003 and 2007 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

T3007 


Currency (64-bit) 

Contains a little-endian 

Filetime 

128 

N676a 


Binary data 

129 

Q6764 

Mailbox identifier? 

Binary data 


3.7. ReceiveFolder 


17.1 Exchange 2003 and 2007 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

T3008 


Currency (64-bit) 

Contains a little-endian 

Filetime 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

128 

Q6764 

Mailbox identifier? 

Binary data 

129 

Q6748 

PR_FI1 

Folder identifier 

Binary data 

256 

Sla 


Large binary data 


3.8. OofHistory 


yiMgBfflBiMfflB and 2007 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

128 

Q6674 


Binary data 

129 

Q6748 

PR_FID 

Folder identifier 

Binary data 

256 

Ncld 


Large binary data 


3.9. NeedRN 


3.9.1. Exchange 2003 and 2007 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

L67f5 


Integer 32-bit signed 

2 

I67ac 


Integer 16-bit signed 

128 

N67b0 

Identifier? 

Binary data 

129 

Q6764 

Mailbox identifier? 

Binary data 


3.10. RepIState 
3.10.1. Exchange 2007 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

L6769 


Integer 16-bit signed 


page 89 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

128 

Q6748 

PR_FID 

Folder identifier 

Binary data 

129 

N67e0 


Binary data 

256 

N6796 


Large binary data 

257 

N67da 


Large binary data 

258 

N6797 


Large binary data 

259 

N6698 


Large binary data 

260 

N67d8 


Large binary data 

261 

N6761 


Large binary data 

262 

N6760 


Large binary data 

263 

N67d9 


Binary data 

264 

T67d4 


Currency (64-bit) 

Contains a little-endian 

Filetime 

265 

N67db 


Binary data 

266 

L67dc 


Integer 32-bit signed 

267 

T67d6 


Currency (64-bit) 

Contains a little-endian 

Filetime 

268 

T67d7 


Currency (64-bit) 

Contains a little-endian 

Filetime 

269 

L67df 


Integer 32-bit signed 

270 

L67dd 


Integer 32-bit signed 

271 

T67e3 


Integer 32-bit signed (check 
this) 

Currency (64-bit) 

Contains a little-endian 

Filetime 

272 

T67d3 


Currency (64-bit) 

Contains a little-endian 

Filetime 

273 

T67el 


Currency (64-bit) 

Contains a little-endian 

Filetime 

274 

T67e2 


Integer 32-bit signed (check 
this) 

Currency (64-bit) 

Contains a little-endian 

Filetime 
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3.11. RepISchedule 


3.11.1. Exchange 2007 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

I67db 


Integer 16-bit signed 

128 

Q6748 

PR_FID 

Folder identifier 

Binary data 


3.12. OwningFolders 

3.12.1. Exchange 2007 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

1 

L6701 


Integer 32-bit signed 

2 

L67f6 


Integer 32-bit signed 

3 

L67f7 


Integer 32-bit signed 

256 

N678d 


Large binary data 

257 

T67d6 


Currency (64-bit) 

Contains a little-endian 

Filetime 

258 

Q6748 

PR_Fljl 

Folder identifier 

Binary data 


TODO add MAPI property identifier column 

TODO add Contains a little-endian Filetime to time values 


3.13. Sites Table 


3.13.1. Exchange 2007 


Column identifier 

Column name 

Column type 

1 

L67f8 

Integer 16-bit signed 
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Column identifier 

Column name 

Column type 

2 

T3007 

Currency (64-bit) 

3 

L675f 

Integer 32-bit signed 

128 

N67f9 

Binary data 

129 

N67fa 

Binary data 


3.14. Secure Aging 
3.14.1. Exchange 2007 


Column 

identifier 

Column name 


Column type 

1 

L67f8 


Integer 16-bit signed 

2 

T3007 


Currency (64-bit) 

128 

Q6748 

PR_FID 

Folder identifier 

Binary data 


3.15. Auto Moves 


3.159 Exchange 2007 


Column 

identifier 

Column name 


Column type 

1 

T3007 


Currency (64-bit) 

128 

Q6748 

PR_FID 

Folder identifier 

Binary data 

129 

Q6749 

PR_PARENT_FID 

Parent folder identifier 

Binary data 

130 

Q67a4 


Binary data 


3.16. Search Pending 


3.16.1. Exchange 2007 
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Column 

identifier 

Column name 


Column type 

128 

Qe65 


Binary data 

129 

Q6749 

PR_PARENT_FID 

Parent folder identifier 

Binary data 


3.17. Cross reference table 


3.17.1. Exchange 2003 


Column identifier 

Column name 

Column type 

128 

Q674b 

Binary data 

256 

N6785 

Large binary data 


3.17.2. Exchange 2007 


Column identifier 

Column name 

Column type 

128 

Q674b 

Binary data 

256 

N6785 

Large binary data 

257 

N6786 

Large binary data 


3.18. DeliveredTo 


3.18.1. Exchange 2003 and 2007 


Column identifier 

Column name 

Column type 

1 

Te06 

Currency (64-bit) 

128 

Q6764 

Binary data 

256 

S1035 

Large binary data 

257 

Q6800 

Binary data 


3.19. PerUserRead 


3.19.1. Exchange 2003 
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Column 

identifier 

Column name 


Column type 

1 

T67dl 


Currency (64-bit) 

128 

N676c 


Binary data 

129 

Q6748 

PR_FID 

Folder identifier 

Binary data 

256 

N67d0 


Large binary data 

257 

N67d2 




3.19.2. Exchange 2007 


Column 

identifier 

Column name 


Column type 

1 

T67dl 


Currency (64-bit) 

128 

N676c 


Binary data 

129 

Q6748 

PR_FID 

Folder identifief 

Binary data 

256 

N67d2 


Large binary data 


3.20. Folder Tombstone 

3.20.1. Exchange 2003 and 2007 


Column 

identifier 

Column name 


Column type 

1 

T3007 


Currency (64-bit) 

128 

Q6748 

PR_FID 

Folder identifier 

Binary data 

129 

Q67a4 


Binary data 


3.21. Message Tombstone 


3.21.1. Exchange 2003 and 2007 


Column 

identifier 

Column name 


Column type 

128 

Q6748 

Mi 

Binary data 
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Column 

identifier 

Column name 


Column type 



Folder identifier 


129 

Q67f3 


Binary data 

130 

Q67f4 


Binary data 


3.22. IndexAge 


3.22.1. Exchange 2003 and 2007 


Column 

identifier 

Column name 


Column type 

1 

L3601 

PidTagFolderType 

Integer 32-bit signed 

2 

Te66 

PR1DELETB_T1ME 

Currency (64-bit) 

128 

S67ec 


Binary data 

129 

Q6748 

PR_FID 

Folder identifier 

Binary data 

256 

Le67 


Integer 32-bit signed 


3.23. Search Queue 

3.23.1. Exchange 2003 and 2007 


Column 

identifier 

Column name 


Column type 

1 

L67c6 


Integer 32-bit signed 

2 

L67c4 


Integer 32-bit signed 

128 

N67c3 


Binary data 

256 

N67c5 


Large binary data 


3.24. TimedEvents 


Column identifier 

Column name 

Column type 

1 

T67c7 

Currency (64-bit) 
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Column identifier 

Column name 

Column type 

2 

L67c6 

Integer 32-bit signed 

256 

N67c8 

Large binary data 


3.25. NamedProps 

3.25.1. Exchange 2003 and 2007 


Column identifier 

Column name 

Column type 

1 

L67ef 

Integer 32-bit signed 

2 

I67fl 

Integer 16-bit signed 

3 

L67f5 

Integer 32-bit signed 

128 

S67ee 

Binary data 

129 

N67f0 

Binary data 

256 

N67f3 

Large binary data 

257 

S67f4 

Large binary data 


3.26. Syncronization table 


3.26.1. Exchange 2003 and 2007 


Column 

identifier 

Column name 


Column type 

1 

L679d 


Integer 32-bit signed 

2 

T3007 


Currency (64-bit) 

128 

Q6748 

PR_FID 

Wider identIM 

Binary data 

256 

S678d 


Large binary data 


3.27. Overflow List Table 

3.27.1. Exchange 2003 and 2007 


Column identifier 

Column name 

Column type 

1 

L6807 

Integer 32-bit signed 
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Column identifier 

Column name 

Column type 

2 

L6808 

Integer 32-bit signed 

3 

L680a 

Integer 32-bit signed 

4 

L680b 

Integer 32-bit signed 

128 

N6809 

Binary data 

256 

N680c 

Large binary data 

257 

N680d 

Large binary data 


3.28. Async Event Queue Table 


MMiH^ISiiiife"2Q8sl^ d Mil 


Column identifier 

Column name 

Column type 

1 

16807 

Integer 16-bit signed 

2 

L6808 

Integer 32-bit signed 

256 

S6809 

Large text 

257 

N680a 

Large binary data 


3.29. IndexQ 


3.29.1. Exchange 2003 and 2007 


Column 

identifier 

Column name 


Column type 

1 

L67c6 


Integer 32-bit signed 

2 

Le67 


Integer 32-bit signed 

128 

Q6748 

PR_FID 

Folder identifier 

Binary data 

129 

N6761 


Binary data 


3.30. MDB Event History Table 


‘-MB 
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Column identifier 

Column name 

Column type 

1 

N6807 

Integer 64-bit signed 

2 

L6808 

Integer 32-bit signed 

3 

L6814 

Integer 32-bit signed 

4 

T680f 

Currency (64-bit) 

5 

L6811 

Integer 32-bit signed 

6 

L6813 

Integer 32-bit signed 

7 

L6815 

Integer 32-bit signed 

8 

Q6818 

Integer 64-bit signed 

9 

L6819 

Integer 32-bit signed 

128 

S6810 

Text 

129 

N6812 

Binary data 

130 

N676a 

Binary data 

131 

Q6809 

Binary data 

132 

Q680a 

Binary data 

133 

Q680b 

Binary data 

134 

Q680c 

Binary data 

135 

Q680d 

Binary data 

136 

Q680e 

Binary data 

137 

N681a 

Binary data 


3.31. MDB Event Watermark Table 
3.31.1. Exchange 2007 


Column 

identifier 

Column name 


Column type 

1 

N6807 


Integer 64-bit signed 

2 

T6817 


Currency (64-bit) 

128 

N6816 


Binary data 

129 

N676a 


Binary data 


3.32. Global 
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3.32.1. Exchange M 


Column identifier 

Column name 


Column type 

1 

L6760 


Integer 32-bit signed 

2 

Le23 


Integer 32-bit signed 

3 

I67fl 


Integer 16-bit signed 

4 

L6767 


Integer 32-bit signed 

5 

T6685 

CKUP 

Currency (64-bit) 
Contains a little-endian 
Filetime 

6 

L676b 


Integer 32-bit signed 

7 

L6773 


Integer 32-bit signed 

128 

N6761 


Binary data 

129 

N6762 


Binary data 

130 

Q6764 


Binary data 

131 

Q6765 

Identifier of root 

Binary data 

132 

N6766 


Binary data 

133 

N6768 

String containing X500 
path? 

Binary data 

134 

L67fb 


Binary data 

Why does this long 
contain > 4 byte data? 

135 

N67fc 


Binary data 

136 

N67ff 


Binary data 

137 

N676a 

GUID related to 

HjUPn mailbox? 

Binary data 

256 

N677f 

Contains array of 4 
byte MAPI identifiers 
corresponds to tagged 
types (column 128) in 
MsgFolderTemplate 

Large binary data 

257 

N67db 


Large binary data 

258 

N67d3 


Large binary data 

259 

MS67c7 


Large text 

260 

MN667f 


Large binary data 

261 

N6775 


Large binary data 
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Column 

identifier 

Column name 


Column type 

1 

L6760 


Integer 32-bit signed 

2 

Le23 


Integer 32-bit signed 

3 

16711 


Integer 16-bit signed 

4 

L6767 


Integer 32-bit signed 

5 

L6693 


Integer 32-bit signed 

6 

L6694 


Integer 32-bit signed 

7 

L6695 


Integer 32-bit signed 

8 

L6690 


Integer 32-bit signed 

9 

T6685 

PR LAST FULL BACK 
UP 

Currency (64-bit) 
Contains a little- 
endian Filetime 

10 

L676b 


Integer 32-bit signed 

11 

L6773 


Integer 32-bit signed 

128 

N6761 


Binary data 

129 

N6762 


Binary data 

130 

N6763 


Binary data 

131 

Q6764 


Binary data 

132 

Q6765 

Some kind of identifier? 

Binary data 

133 

N6766 


Binary data 

134 

N6768 

String containing X500 
path? 

Binary data 

135 

L67fb 


Binary data 

136 

N67fc 


Binary data 

137 

N67ff 


Binary data 

138 

N676a 


Binary data 

256 

N6691 

jglgpL i 

EDULE 

Binary data 

257 

N677f 


Large binary data 

258 

N67db 


Large binary data 

259 

N67d3 


Large binary data 

260 

MS67c7 


Large text 

261 

MN667f 


Large binary data 

262 

N6775 


Large binary data 
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Column 

identifier 

Column name 


Column type 

263 

N6775 


Large binary data 

264 

N67d3 


Large binary data 


3.33. ReplidMap 


3.33.1. Exchange 2003 and 2007 


Column 

identifier 

Column name 


Column type 

1 

L6769 


Integer 16-bit signed 

128 

N676a 


Binary data 


3.34. LockLookup 


3.34.1. Exchange 2007 


Column 

identifier 

Column name 


Column type 

128 

Q6748 

PR_F1D 

Folder identifier 

Binary data 

129 

Q6749 

PR_PARENT_FID 

Parent folder identifier 

Binary data 

130 

L380b 


Binary data 


3.35. PerfMonRowsInTables 


3.35.1. Excimfe 2007 


Column 

identifier 

Column name 


Column type 

1 

RowCounts Valid 


Integer 32-bit signed 


page 101 


Column 

identifier 

Column name 


Column type 

2 

Folders 


Integer 32-bit signed 

3 

IndexAge 


Integer 32-bit signed 

4 

Mailbox 


Integer 32-bit signed 

5 

MsgFolder 


Integer 32-bit signed 

6 

ReplidMap 


Integer 32-bit signed 

7 

DeliveredTo 


Integer 32-bit signed 

8 

NeedRN 


Integer 32-bit signed 

9 

Folder Tombstone 


Integer 32-bit signed 

10 

Message Tombstone 


Integer 32-bit signed 

11 

Replication 


Integer 32-bit signed 

12 

PerUserRead 


Integer 32-bit signed 

13 

TimedE vents 


Integer 32-bit signed 

14 

AclList 


Integer 32-bit signed 

15 

AclMember 


Integer 32-bit signed 

16 

Rules 


Integer 32-bit signed 

17 

NamedProps 


Integer 32-bit signed 

18 

Categ 


Integer 32-bit signed 

19 

DeletedMessages 


Integer 32-bit signed 

20 

DeletedAttachments 


Integer 32-bit signed 

21 

DeletedFolders 


Integer 32-bit signed 

22 

ReceiveFolder 


Integer 32-bit signed 

23 

Search Queue 


Integer 32-bit signed 

24 

Msg 


Integer 32-bit signed 

25 

DumpsterSize 


Currency (64-bit) 

26 

DumpsterCount 


Integer 32-bit signed 


3.36. #-X 


There are several tables called 1-A, 1-2, etc. The tables use the 'MsgFolderTemplate' table as their 
template. 

These tables contain several of the following columns: 


Column identifier 

28 13805 

29 13806 

30 L3808 


Column name 
Integer 16-bit signed 
Integer 16-bit signed 
Integer 32-bit signed 


Column type 
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31 

L3809 

Integer 32-bit signed 

32 

T380a 

Currency (64-bit) 

133 

Q3801 

Binary data 

134 

Q3802 

Binary data 

135 

Q3803 

Binary data 

136 

Q3800 

Binary data 

137 

N3804 

Binary data 

138 

N3807 

Binary data 

256 

N67b9 

Large binary data 

257 

N67ba 

Large binary data 

258 

N67bd 

Large binary data 

259 

N67be 

Large binary data 

260 

B10f2 

Boolean 

260 

L6803 

Integer 32-bit signed 

260 

S3716 

Large text 

260 

S380c 

Large text 

261 

J3701 

Large binary data 

261 

L6801 

Integer 32-bit signed 

262 

S6802 

Large text 


3.36.1. 1-23 

Only #-X table that c ffl«HMlfe 701 

How much attachment data can there be N3701, J3701, Q3701, F3701 


3.36.1.1. Exchange 2003 


Column 

identifier 

Column name 

MAPI property identifier 

Column type 

256 

N67b9 


Large binary data 

257 

N67ba 


Large binary data 

258 

N67bd 


Large binary data 

259 

N67be 


Large binary data 

260 

S3716 


Large text 

261 

J3701 

PidTagAttachDataBinary 

Large binary data 

262 

L3714 


Integer 32-bit signed 

263 

S3712 


Large text 

264 

S3713 


Large text 

265 

B7fff 


Boolean 

266 

B7ffe 


Boolean 

267 

L7ffd 


Integer 32-bit signed 

268 

T7ffc 


Currency (64-bit) 

269 

T7ffb 


Currency (64-bit) 

270 

L7ffa 


Integer 32-bit signed 
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Column 

identifier 

Column name 

MAPI property identifier 

Column type 

271 

03701 

PidTagAttachDataBinary 

Large binary data 

272 

N6810 


Large binary data 

273 

B10f2 


Boolean 

277 

N3715 


Large binary data 

278 

L1096 


Integer 32-bit signed 

281 

L3710 


Integer 32-bit signed 

282 

S1047 


Large text 

283 

F3701 

PidTagAttachDataBinary 

Super large value 

284 

MGe5e 


Binary data 

285 

T10c4 


Currency (64-bit) 

286 

T10c3 


Currency (64-bit) 

287 

T10c5 


Currency (64-bit) 

288 

L1092 


Integer 32-bit signed 

289 

L1095 


Integer 32-bit signed 

290 

L340f 


Integer 32-bit signed 

291 

L340d 


Integer 32-bit signed 


3.36.1.2. F3701 data 

The F3701 value indicates the attachment data is store in the streaming file. The F3701 data 
contains the segment descriptors which define where the data is located in the streaming file. 


The attachment data segment descriptor list is variable byte of size and consists of: 


offset 

size 

value 

description 

0 

8 


Attachment data size 

8 

8 


Number of segment descriptors 

16 

8 

0x00000001 


24 



Segment descriptor array 


The attachment data segment descriptor is 24 byte of size and consists of: 


offset 

size 

value 

description 

0 

8 


Segment (allocated) size 

8 

8 


Segment offset 

The offset is relative to the start of the 
streaming file 

16 

8 
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3.36.1.3. J3701 data 


56 

50 

52 

4f 

0a 

00 

00 

00 

01 

00 

00 

00 9f 4e 00 00 

02 

01 

01 

37 

00 

00 

00 

00 

00 

00 

00 

00 00 00 00 00 

01 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

94 

00 

00 

00 









94 

00 

00 

00 









last 2 

! values change 







3.37. S-l-X 

IE p these secujrity^^ntifie’j^^lt® 

There are several tables tables called S-l-4461, S-1-324C6, etc. The tables use the 
'MsgFolderTemplate' table as their template. 

These tables contain several of the following columns: 

Column identifier Column name Column type 


Table: 

S-l-4661 (208) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-6D75 (465) 

256 

Qe65 

Currency (64-bit) 

Table: 

S-1-324C2 (15403) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-324C6 (15409) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-324CA (15415) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-324CE (15421) 

256 

S6802 

Large text 
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257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-324D2 (15427) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-324D6 (15433) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-324DA (15439) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-324DE (15445) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-324E2 (15451) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-324E6 (15457) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-324EA (15463) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 

Table: 

S-1-324EE (15469) 

256 

S6802 

Large text 

257 

L6801 

Integer 32-bit signed 

258 

L6803 

Integer 32-bit signed 

259 

Qe65 

Currency (64-bit) 
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S-1-324EF (15475) 

Qe65 Currency (64-bit) 

Q6747 Currency (64-bit) 

N10c8 Large binary data 


Table: 

256 

257 

258 


3.38. 1-#-# 

Some kind of index table 
1-3-1 

1 L6815 

2 G6816 

3 L681f 

4 16817 

5 L6818 

6 T668f 

7 T681e 

8 Te06 

128 Q6748 

129 Q674a 


3.39. SendQ 


Integer 32-bit signed 
GUID 

Integer 32-bit signed 
Integer 16-bit unsigned 
Integer 32-bit signed 
Date and time 
Date and time 
Date and time 
Binary data 
Binary data 


3.39.1. Exchange 2003 and 2007 


Column 

identifier 

Column name 


Column type 

1 

T39 


Currency (64-bit) 

2 

Le08 


Integer 32-bit signed 

3 

B6772 


Boolean 

128 

Q6748 

PR_FID 

Folder identifier 

Binary data 

129 

Q674a 


Binary data 

256 

Scla 


Large text 


3.40. Content Indexing Property Store Watermark 


3.40ft Exchange 2007 


Column identifier 

Column name 

Column type 

1 

G681d 

GUID 
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Column identifier 

Column name 

Column type 

2 

Lff5 

Integer 32-bit signed 

3 

Q681c 

Integer 64-bit signed 

4 

T66a9 

Date and time 

5 

16817 

Integer 16-bit signed 

256 

N3701 

Large binary data 
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Appendix B. GNU Free Documentation License 

Version 1.3, 3 November 2008 

Copyright © 2000, 2001, 2002, 2007, 2008 Free Software Foundation, Inc. 
<http://fsf.org/> 

Everyone is permitted to copy and distribute verbatim copies of this license 
document, but changing it is not allowed. 


0. PREAMBLE 

The purpose of this License is to make a manual, textbook, or other functional and useful 
document "free" in the sense of freedom: to assure everyone the effective freedom to copy and 
redistribute it, with or without modifying it, either commercially or noncommercially. 

Secondarily, this License preserves for the author and publisher a way to get credit for their work, 
while not being considered responsible for modifications made by others. 

This License is a kind of "copyleft", which means that derivative works of the document must 
themselves be free in the same sense. It complements the GNU General Public License, which is a 
copyleft license designed for free software. 

We have designed this License in order to use it for manuals for free software, because free 
software needs free documentation: a free program should come with manuals providing the same 
freedoms that the software does. But this License is not limited to software manuals; it can be 
used for any textual work, regardless of subject matter or whether it is published as a printed 
book. We recommend this License principally for works whose purpose is instruction or reference. 

1. APPLICABILITY AND DEFINITIONS 

This License applies to any manual or other work, in any medium, that contains a notice placed by 
the copyright holder saying it can be distributed under the terms of this License. Such a notice 
grants a world-wide, royalty-free license, unlimited in duration, to use that work under the 
conditions stated herein. The "Document", below, refers to any such manual or work. Any member 
of the public is a licensee, and is addressed as "you". You accept the license if you copy, modify 
or distribute the work in a way requiring permission under copyright law. 

A "Modified Version" of the Document means any work containing the Document or a portion of 
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it, either copied verbatim, or with modifications and/or translated into another language. 

A "Secondary Section" is a named appendix or a front-matter section of the Document that deals 
exclusively with the relationship of the publishers or authors of the Document to the Document's 
overall subject (or to related matters) and contains nothing that could fall directly within that 
overall subject. (Thus, if the Document is in part a textbook of mathematics, a Secondary Section 
may not explain any mathematics.) The relationship could be a matter of historical connection 
with the subject or with related matters, or of legal, commercial, philosophical, ethical or political 
position regarding them. 

The "Invariant Sections" are certain Secondary Sections whose titles are designated, as being 
those of Invariant Sections, in the notice that says that the Document is released under this 
License. If a section does not fit the above definition of Secondary then it is not allowed to be 
designated as Invariant. The Document may contain zero Invariant Sections. If the Document does 
not identify any Invariant Sections then there are none. 

The "Cover Texts" are certain short passages of text that are listed, as Front-Cover Texts or Back- 
Cover Texts, in the notice that says that the Document is released under this License. A Front- 
Cover Text may be at most 5 words, and a Back-Cover Text may be at most 25 words. 

A "Transparent" copy of the Document means a machine-readable copy, represented in a format 
whose specification is available to the general public, that is suitable for revising the document 
straightforwardly with generic text editors or (for images composed of pixels) generic paint 
programs or (for drawings) some widely available drawing editor, and that is suitable for input to 
text formatters or for automatic translation to a variety of formats suitable for input to text 
formatters. A copy made in an otherwise Transparent file format whose markup, or absence of 
markup, has been arranged to thwart or discourage subsequent modification by readers is not 
Transparent. An image format is not Transparent if used for any substantial amount of text. A 
copy that is not "Transparent" is called "Opaque". 

Examples of suitable formats for Transparent copies include plain ASCII without markup, Texinfo 
input format, LaTeX input format, SGML or XML using a publicly available DTD, and standard- 
conforming simple HTML, PostScript or PDF designed for human modification. Examples of 
transparent image formats include PNG, XCF and JPG. Opaque formats include proprietary 
formats that can be read and edited only by proprietary word processors, SGML or XML for 
which the DTD and/or processing tools are not generally available, and the machine-generated 
HTML, PostScript or PDF produced by some word processors for output purposes only. 

The "Title Page" means, for a printed book, the title page itself, plus such following pages as are 
needed to hold, legibly, the material this License requires to appear in the title page. For works in 
formats which do not have any title page as such, "Title Page" means the text near the most 
prominent appearance of the work's title, preceding the beginning of the body of the text. 

The "publisher" means any person or entity that distributes copies of the Document to the public. 

A section "Entitled XYZ" means a named subunit of the Document whose title either is precisely 
XYZ or contains XYZ in parentheses following text that translates XYZ in another language. 

(Here XYZ stands for a specific section name mentioned below, such as "Acknowledgements", 
"Dedications", "Endorsements", or "History".) To "Preserve the Title" of such a section when you 
modify the Document means that it remains a section "Entitled XYZ" according to this definition. 

The Document may include Warranty Disclaimers next to the notice which states that this License 
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applies to the Document. These Warranty Disclaimers are considered to be included by reference 
in this License, but only as regards disclaiming warranties: any other implication that these 
Warranty Disclaimers may have is void and has no effect on the meaning of this License. 

2. VERBATIM COPYING 

You may copy and distribute the Document in any medium, either commercially or 
noncommercially, provided that this License, the copyright notices, and the license notice saying 
this License applies to the Document are reproduced in all copies, and that you add no other 
conditions whatsoever to those of this License. You may not use technical measures to obstruct or 
control the reading or further copying of the copies you make or distribute. However, you may 
accept compensation in exchange for copies. If you distribute a large enough number of copies 
you must also follow the conditions in section 3. 

You may also lend copies, under the same conditions stated above, and you may publicly display 
copies. 

3. COPYING IN QUANTITY 

If you publish printed copies (or copies in media that commonly have printed covers) of the 
Document, numbering more than 100, and the Document's license notice requires Cover Texts, you 
must enclose the copies in covers that carry, clearly and legibly, all these Cover Texts: Front- 
Cover Texts on the front cover, and Back-Cover Texts on the back cover. Both covers must also 
clearly and legibly identify you as the publisher of these copies. The front cover must present the 
full title with all words of the title equally prominent and visible. You may add other material on 
the covers in addition. Copying with changes limited to the covers, as long as they preserve the 
title of the Document and satisfy these conditions, can be treated as verbatim copying in other 
respects. 

If the required texts for either cover are too voluminous to fit legibly, you should put the first ones 
listed (as many as fit reasonably) on the actual cover, and continue the rest onto adjacent pages. 

If you publish or distribute Opaque copies of the Document numbering more than 100, you must 
either include a machine-readable Transparent copy along with each Opaque copy, or state in or 
with each Opaque copy a computer-network location from which the general network-using 
public has access to download using public- standard network protocols a complete Transparent 
copy of the Document, free of added material. If you use the latter option, you must take 
reasonably prudent steps, when you begin distribution of Opaque copies in quantity, to ensure that 
this Transparent copy will remain thus accessible at the stated location until at least one year after 
the last time you distribute an Opaque copy (directly or through your agents or retailers) of that 
edition to the public. 

It is requested, but not required, that you contact the authors of the Document well before 
redistributing any large number of copies, to give them a chance to provide you with an updated 
version of the Document. 

4. MODIFICATIONS 

You may copy and distribute a Modified Version of the Document under the conditions of sections 
2 and 3 above, provided that you release the Modified Version under precisely this License, with 
the Modified Version filling the role of the Document, thus licensing distribution and modification 
of the Modified Version to whoever possesses a copy of it. In addition, you must do these things in 
the Modified Version: 

• A. Use in the Title Page (and on the covers, if any) a title distinct from that of the 

Document, and from those of previous versions (which should, if there were any, be listed 
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in the History section of the Document). You may use the same title as a previous version 
if the original publisher of that version gives permission. 

• B. List on the Title Page, as authors, one or more persons or entities responsible for 
authorship of the modifications in the Modified Version, together with at least five of the 
principal authors of the Document (all of its principal authors, if it has fewer than five), 
unless they release you from this requirement. 

• C. State on the Title page the name of the publisher of the Modified Version, as the 
publisher. 

• D. Preserve all the copyright notices of the Document. 

• E. Add an appropriate copyright notice for your modifications adjacent to the other 
copyright notices. 

• F. Include, immediately after the copyright notices, a license notice giving the public 
permission to use the Modified Version under the terms of this License, in the form shown 
in the Addendum below. 

• G. Preserve in that license notice the full lists of Invariant Sections and required Cover 
Texts given in the Document's license notice. 

• H. Include an unaltered copy of this License. 

• I. Preserve the section Entitled "History", Preserve its Title, and add to it an item stating at 
least the title, year, new authors, and publisher of the Modified Version as given on the 
Title Page. If there is no section Entitled "History" in the Document, create one stating the 
title, year, authors, and publisher of the Document as given on its Title Page, then add an 
item describing the Modified Version as stated in the previous sentence. 

• J. Preserve the network location, if any, given in the Document for public access to a 
Transparent copy of the Document, and likewise the network locations given in the 
Document for previous versions it was based on. These may be placed in the "History" 
section. You may omit a network location for a work that was published at least four years 
before the Document itself, or if the original publisher of the version it refers to gives 
permission. 

• K. For any section Entitled "Acknowledgements" or "Dedications", Preserve the Title of 
the section, and preserve in the section all the substance and tone of each of the contributor 
acknowledgements and/or dedications given therein. 

• L. Preserve all the Invariant Sections of the Document, unaltered in their text and in their 
titles. Section numbers or the equivalent are not considered part of the section titles. 

• M. Delete any section Entitled "Endorsements". Such a section may not be included in the 
Modified Version. 

• N. Do not retitle any existing section to be Entitled "Endorsements" or to conflict in title 
with any Invariant Section. 

• O. Preserve any Warranty Disclaimers. 

If the Modified Version includes new front- matter sections or appendices that qualify as 
Secondary Sections and contain no material copied from the Document, you may at your option 
designate some or all of these sections as invariant. To do this, add their titles to the list of 
Invariant Sections in the Modified Version's license notice. These titles must be distinct from any 
other section titles. 

You may add a section Entitled "Endorsements", provided it contains nothing but endorsements of 
your Modified Version by various parties — for example, statements of peer review or that the text 
has been approved by an organization as the authoritative definition of a standard. 

You may add a passage of up to five words as a Front-Cover Text, and a passage of up to 25 
words as a Back-Cover Text, to the end of the list of Cover Texts in the Modified Version. Only 
one passage of Front-Cover Text and one of Back-Cover Text may be added by (or through 
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arrangements made by) any one entity. If the Document already includes a cover text for the same 
cover, previously added by you or by arrangement made by the same entity you are acting on 
behalf of, you may not add another; but you may replace the old one, on explicit permission from 
the previous publisher that added the old one. 

The author(s) and publisher(s) of the Document do not by this License give permission to use their 
names for publicity for or to assert or imply endorsement of any Modified Version. 

5. COMBINING DOCUMENTS 

You may combine the Document with other documents released under this License, under the 
terms defined in section 4 above for modified versions, provided that you include in the 
combination all of the Invariant Sections of all of the original documents, unmodified, and list 
them all as Invariant Sections of your combined work in its license notice, and that you preserve 
all their Warranty Disclaimers. 

The combined work need only contain one copy of this License, and multiple identical Invariant 
Sections may be replaced with a single copy. If there are multiple Invariant Sections with the 
same name but different contents, make the title of each such section unique by adding at the end 
of it, in parentheses, the name of the original author or publisher of that section if known, or else a 
unique number. Make the same adjustment to the section titles in the list of Invariant Sections in 
the license notice of the combined work. 

In the combination, you must combine any sections Entitled "History" in the various original 
documents, forming one section Entitled "History"; likewise combine any sections Entitled 
"Acknowledgements", and any sections Entitled "Dedications". You must delete all sections 
Entitled "Endorsements". 

6. COLLECTIONS OF DOCUMENTS 

You may make a collection consisting of the Document and other documents released under this 
License, and replace the individual copies of this License in the various documents with a single 
copy that is included in the collection, provided that you follow the rules of this License for 
verbatim copying of each of the documents in all other respects. 

You may extract a single document from such a collection, and distribute it individually under this 
License, provided you insert a copy of this License into the extracted document, and follow this 
License in all other respects regarding verbatim copying of that document. 

7. AGGREGATION WITH INDEPENDENT WORKS 

A compilation of the Document or its derivatives with other separate and independent documents 
or works, in or on a volume of a storage or distribution medium, is called an "aggregate" if the 
copyright resulting from the compilation is not used to limit the legal rights of the compilation's 
users beyond what the individual works permit. When the Document is included in an aggregate, 
this License does not apply to the other works in the aggregate which are not themselves 
derivative works of the Document. 

If the Cover Text requirement of section 3 is applicable to these copies of the Document, then if 
the Document is less than one half of the entire aggregate, the Document's Cover Texts may be 
placed on covers that bracket the Document within the aggregate, or the electronic equivalent of 
covers if the Document is in electronic form. Otherwise they must appear on printed covers that 
bracket the whole aggregate. 

8. TRANSLATION 
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Translation is considered a kind of modification, so you may distribute translations of the 
Document under the terms of section 4. Replacing Invariant Sections with translations requires 
special permission from their copyright holders, but you may include translations of some or all 
Invariant Sections in addition to the original versions of these Invariant Sections. You may include 
a translation of this License, and all the license notices in the Document, and any Warranty 
Disclaimers, provided that you also include the original English version of this License and the 
original versions of those notices and disclaimers. In case of a disagreement between the 
translation and the original version of this License or a notice or disclaimer, the original version 
will prevail. 

If a section in the Document is Entitled "Acknowledgements", "Dedications", or "History", the 
requirement (section 4) to Preserve its Title (section 1) will typically require changing the actual 
title. 

9. TERMINATION 

You may not copy, modify, sublicense, or distribute the Document except as expressly provided 
under this License. Any attempt otherwise to copy, modify, sublicense, or distribute it is void, and 
will automatically terminate your rights under this License. 

However, if you cease all violation of this License, then your license from a particular copyright 
holder is reinstated (a) provisionally, unless and until the copyright holder explicitly and finally 
terminates your license, and (b) permanently, if the copyright holder fails to notify you of the 
violation by some reasonable means prior to 60 days after the cessation. 

Moreover, your license from a particular copyright holder is reinstated permanently if the 
copyright holder notifies you of the violation by some reasonable means, this is the first time you 
have received notice of violation of this License (for any work) from that copyright holder, and 
you cure the violation prior to 30 days after your receipt of the notice. 

Termination of your rights under this section does not terminate the licenses of parties who have 
received copies or rights from you under this License. If your rights have been terminated and not 
permanently reinstated, receipt of a copy of some or all of the same material does not give you any 
rights to use it. 

10. FUTURE REVISIONS OF THIS LICENSE 

The Free Software Foundation may publish new, revised versions of the GNU Free Documentation 
License from time to time. Such new versions will be similar in spirit to the present version, but 
may differ in detail to address new problems or concerns. See http://www.gnu.org/copyleft/. 

Each version of the License is given a distinguishing version number. If the Document specifies 
that a particular numbered version of this License "or any later version" applies to it, you have the 
option of following the terms and conditions either of that specified version or of any later version 
that has been published (not as a draft) by the Free Software Foundation. If the Document does 
not specify a version number of this License, you may choose any version ever published (not as a 
draft) by the Free Software Foundation. If the Document specifies that a proxy can decide which 
future versions of this License can be used, that proxy's public statement of acceptance of a 
version permanently authorizes you to choose that version for the Document. 

11. RELICENSING 

"Massive Multiauthor Collaboration Site" (or "MMC Site") means any World Wide Web server 
that publishes copyrightable works and also provides prominent facilities for anybody to edit 
those works. A public wiki that anybody can edit is an example of such a server. A "Massive 
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Multiauthor Collaboration" (or "MMC") contained in the site means any set of copyrightable 
works thus published on the MMC site. 

"CC-BY-SA" means the Creative Commons Attribution- Share Alike 3.0 license published by 
Creative Commons Corporation, a not-for-profit corporation with a principal place of business in 
San Francisco, California, as well as future copyleft versions of that license published by that 
same organization. 

"Incorporate" means to publish or republish a Document, in whole or in part, as part of another 
Document. 

An MMC is "eligible for relicensing" if it is licensed under this License, and if all works that were 
first published under this License somewhere other than this MMC, and subsequently incorporated 
in whole or in part into the MMC, (1) had no cover texts or invariant sections, and (2) were thus 
incorporated prior to November 1, 2008. 

The operator of an MMC Site may republish an MMC contained in the site under CC-BY-SA on 
the same site at any time before August 1, 2009, provided the MMC is eligible for relicensing. 
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